WHMCS - Admin Application Links CSRF Vulnerability (R911-0188) - bit.ly/20taR3L
CloudFlare (cPanel) - Cloudflare_data.yaml Symlink Attack (R911-0187) - bit.ly/234Ctyk
We currently have spots available for software security audits. Please email [email protected] for more info.
Proxmox (LXC PVE Container) - Arbitrary File Access (R911-0186) - bit.ly/1WZgBUC
OpenVZ (vzctl) - SimFS to Ploop Container Takeover (R911-0185) - bit.ly/1PTXGTW
cPanel - Password Change Hardlink Arbitrary File Write (R911-0184) - bit.ly/1CXlPXy #cpanel
cPanel - Force Password Change Symlink Privilege Escalation (R911-0183) - bit.ly/1LxXhHB #cpanel #rootexploit
CloudLinux - CageFS Tmpwatch Arbitrary File Deletion (R911-0181) - bit.ly/1KIfjVB
SolusVM - Edit DNS Stored XSS Vulnerability (R911-0180) - bit.ly/1GlpX1N #HostingSecList
SolusVM - Reseller Panel Arbitrary Command Execution (R911-0179) - bit.ly/1QW1sLi #HostingSecList
Vision HelpDesk - Various Modules Local File Inclusions (R911-0178) - bit.ly/1F8rHbW
Vision HelpDesk - User Images Input Validation Failure (R911-0177) - bit.ly/1FH56H2
RACK911 Labs retweeted
Kudos to @Rack911Labs for discovering and reporting a security vulnerability in our service! It wasn't exploited and is now fixed.
RACK911 Labs retweeted
WordPress 4.2.2 Released - Critical Security Update - bit.ly/1IQQAOk
Vision HelpDesk 4 - Client Area XSS Vulnerabilities (R911-0176) - bit.ly/1Q9bQRF
IP.Board 3.3.x & 3.4.x - Messenger Directories Input Validation Failure (R911-0175) - bit.ly/1GOl4RB
IP.Board 3.3.x & 3.4.x - Send Messages Input Validation Failure (R911-0174) - bit.ly/1EWtAO2
vBulletin 5 - Private Messages Input Validation Failure (R911-0173) - bit.ly/1Gqu905


