By Month

Oct 2026
Sept 2026
Aug 2026
Jul 2026
Dec 2025
Apr 2024
Mar 2024
Older Announcements...
View RSS Feed

  By Month

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket

Announcements

MA-1480.082026: MyCERT Advisory - Malicious Fake Park@Perak Parking Website Targeting iPhone Users

  • 16th September 2026
Continue reading

CVE-2026-90937 (matched: apache http server)

  • 16th September 2026
froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customers to inject arbitrary nginx or Apache configuration directives. Attackers can supply URLs containing literal newlines that are written verbatim into vhost config files during cron rebuild, enabling web server configuration ...
Continue reading

CVE-2026-90937 (matched: nginx)

  • 16th September 2026
froxlor versions before 2.2.5 fail to validate newline characters in subdomain redirect URLs, allowing authenticated customers to inject arbitrary nginx or Apache configuration directives. Attackers can supply URLs containing literal newlines that are written verbatim into vhost config files during cron rebuild, enabling web server configuration ...
Continue reading

CVE-2026-91939 (matched: php)

  • 16th September 2026
Cotonti 1.0.0 Comments plugin passes the ci GET parameter to unserialize() without allowed_classes restriction, allowing unauthenticated attackers to instantiate arbitrary PHP classes with attacker-controlled properties. Attackers can exploit PHP object injection through crafted serialized payloads to trigger gadget chains and achieve database ...
Continue reading

  Support

My Support Tickets
Announcements
Knowledgebase
Downloads
Network Status
Open Ticket