Tag Archives: WHM

What is VPS?

VPS can be a great solution for the web presence of your business, blog, e-commerce, or any other project, especially when you are just going to start or not going to use too many resources, a VPS provides you with a pretty much solid ground, that is to say, security and stability, uptime and fault resistance combined with relatively lower costs.

The reason for this is the virtualization technology that allows dividing the capacities of one single physical server into separate virtual machines with dedicated resources – storage, memory, CPU – as well as their own virtual system and IP address. This way you get the virtual server whose operation is not bothered by its neighbors and at the same time you pay less because you pay just for a part of a physical…

Some serious security vulnerabilities exist in the web hosting platform cPanel & WHM allowing for remote attacks. Some of the bugs actually exist because of an intended feature, hence, remain unfixed.

cPanel & WHM Vulnerabilities

Researchers from the UK-based cybersecurity firm Fortbridge have found numerous security issues in the popular web hosting platform.

In a recent blog post, Adrian Tiron, Cloud AppSec Consultant at Fortbridge, explained that exploiting the vulnerabilities allows remote code execution attacks on cPanel & WHM.

Briefly, the researchers spotted the bugs during a black-box pentest of cPanel/WHM that supports entire server administration.

One of the bugs includes an XML External Entity (XXE) that existed in the reseller account the researchers tested. This issue…

DoubleClick by Google refers to the DoubleClick Digital Marketing platform which is a separate division within Google. This is Google’s most advanced advertising tools set, which includes five interconnected platform components.

DoubleClick Campaign Manager: the ad-serving platform, called an Ad Server, that delivers ads to your customers and measures all online advertising, even across screens and channels.

DoubleClick Bid Manager – the programmatic bidding platform for bidding on high-quality ad inventory from more than 47 ad marketplaces including Google Display Network.

DoubleClick Ad Exchange: the world’s largest ad marketplace for purchasing display, video, mobile, Search and even Facebook inventory.

DoubleClick Search: is more powerful than AdWords and used for purchasing…

Adam Bannister

11 August 2021 at 10:58 UTC

Updated: 11 August 2021 at 11:02 UTC

Pen testers and vendor disagree over appropriate mitigations

Security researchers have achieved remote code execution (RCE) on web hosting platform cPanel & WHM after bypassing CSRF protections and escalating privileges via a stored cross-site scripting (XSS) vulnerability.

cPanel & WHM is a suite of Linux tools that enable the automation of web hosting tasks via a graphical user interface (GUI). cPanel is used in the hosting of more than 168,000 websites, according to Datanyze.

During a black-box pen test, RCE was also demonstrated via a “more convoluted” cross-site WebSocket hijacking attack that was…

Adam Bannister

11 August 2021 at 10:58 UTC

Updated: 11 August 2021 at 14:32 UTC

Pen testers and vendor disagree over appropriate mitigations

Security researchers have achieved remote code execution (RCE) and privilege escalation on web hosting platform cPanel & WHM via a stored cross-site scripting (XSS) vulnerability.

cPanel & WHM is a suite of Linux tools that enable the automation of web hosting tasks via a graphical user interface (GUI). cPanel is used in the hosting of more than 168,000 websites, according to Datanyze.

During a black-box pen test, RCE was also demonstrated via a “more convoluted” CSRF bypass chained with a cross-site WebSocket hijacking attack that was possible…