2055 matches found
CVE-2021-26266
CVE-2021-26266 affects cPanel prior to 92.0.9. The issue allows a Reseller to bypass the suspension lock (SEC-578). The connected documents consistently describe the vulnerability in this product/version; no root-cause or exploit details are provided beyond the bypass of the suspension mechanism....
CVE-2021-26267
CVE-2021-26267 affects cPanel prior to 92.0.9. An MySQL user with an old-style password hash can bypass suspension (SEC-579). Remediation: update to cPanel 92.0.9 or later to resolve the issue. Exploitation status not provided in the supplied documents.
CVE-2021-26266: Undefined Security Weakness
cPanel before 92.0.9 allows a Reseller to bypass the suspension lock SEC-578...
CVE-2021-3002
Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...
CVE-2021-3002: Improper Neutralization of Input During Web Page Generation
Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter...
PT-2020-6819
Name of the Vulnerable Software and Affected Versions Samsung Mobile Devices versions prior to SMR MAR-2021 Release 1 Description The issue is related to an improper access control vulnerability in the sec log file, which exposes sensitive kernel information to userspace. This vulnerability is...
CVE-2020-29135
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
Design/Logic Flaw
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
Code injection
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
CVE-2020-29136
CVE-2020-29136 affects cPanel versions prior to 90.0.17, where an authentication bypass allows 2FA to be defeated via brute-force (SEC-575). Root cause: improper enforcement of multi-factor authentication during brute-force attempts. Impact: unauthorized access by bypassing 2FA; exploitation stat...
CVE-2020-29136
In cPanel before 90.0.17, 2FA can be bypassed via a brute-force approach SEC-575...
CVE-2020-29137
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...
CVE-2020-29135
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
CVE-2020-29135
CVE-2020-29135 affects cPanel prior to 90.0.17, with multiple instances of URL parameter injection (SEC-567). The connected records identify the affected product and the vulnerability type, but do not provide explicit exploitation details, affected components beyond the web interfaces, or a confi...
CVE-2020-29137: Improper Neutralization of Input During Web Page Generation
cPanel before 90.0.17 allows self-XSS via the WHM Transfer Tool interface SEC-577...
CVE-2020-29135: Inappropriate Encoding for Output Context
cPanel before 90.0.17 has multiple instances of URL parameter injection SEC-567...
This Week in Security News: US Cyber Command Exposes New Russian Malware and REvil Ransomware Gang ‘Acquires’ KPOT Malware
Welcome to our weekly roundup, where we share what you need to know about cybersecurity news and events that happened over the past few days. This week, learn about eight new malware samples that were developed and deployed by Russian hackers in recent attacks. Also, read about how the operators ...
Toymaker Mattel Hit by Ransomware Attack
Top toymaker Mattel revealed it was a victim of a ransomware attack that successfully encrypted some data and temporarily crippled a limited number of business functions. The disclosure was part of a U.S. Securities Exchange Commission SEC disclosure filed in late October. Mattel reported the...
PT-2020-11791
Name of the Vulnerable Software and Affected Versions Android versions Android-8.0 through Android-11 Description In the btm sec disconnected function of btm sec.cc, there is a possible memory corruption due to a use after free. This could lead to remote code execution in the Bluetooth server wit...
