4287 matches found
ACSC Releases Advisory on Password Spraying Attacks
The Australian Cyber Security Centre ACSC has released an advisory on password spraying attacks. Password spraying is a type of brute-force attack in which a malicious actor uses a single password against targeted user accounts before moving on to attempt a second password, and so on. This...
cPanel cross-site scripting vulnerability (CNVD-2019-30463)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A cross-site scripting vulnerability exists in the Webmail Password and Security page in versions prior to cPanel 62.0.4. The...
cPanel Code Execution Vulnerability (CNVD-2019-26336)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A code execution vulnerability exists in versions of cPanel prior to 64.0.21. An attacker exploited the vulnerability to execute...
cPanel Code Execution Vulnerability (CNVD-2019-26342)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 64.0.21. The vulnerability can be exploited by an attacker to...
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
Default credentials
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
CVE-2017-18473
CVE-2017-18473 affects cPanel before 62.0.4, where the Webmail Password and Security page is vulnerable to a self-XSS due to insufficient input validation. Root cause cited in CNVD as lack of proper validation of client-side data. Impact is self-XSS on affected page; exploitation details are not ...
CVE-2017-18473
cPanel before 62.0.4 allows self XSS on the webmail Password and Security page SEC-199...
cPanel Information Disclosure Vulnerability (CNVD-2019-29722)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions prior to cPanel 57.9999.54. An attacker can exploit this vulnerability to perform...
CVE-2017-18437
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
Code injection
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
CVE-2017-18433
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a storefilter API call SEC-236...
Code injection
cPanel before 64.0.21 allows code execution by webmail and demo accounts via a storefilter API call SEC-236...
CVE-2017-18437
CVE-2017-18437 affects cPanel prior to 64.0.21, where a Webmail account can execute code via forwarders (SEC-240). Impact is code execution with Webmail privileges; CVSS data shows LOW to MEDIUM base scores (C/L/I/P). Remediation: upgrade to 64.0.21 or newer to fix the vulnerability. Other detail...
CVE-2017-18437
cPanel before 64.0.21 allows a Webmail account to execute code via forwarders SEC-240...
CVE-2016-10816
cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders SEC-121...
CVE-2016-10816
cPanel before 57.9999.54 allows Webmail accounts to execute arbitrary code through forwarders SEC-121...