Magento web e-commerce SUPEE-5344 critical RCE (remote code execution) vulnerability .


Cheap reseller Hosting


magento-security-update

A patch to address the flaws was released on February 9, 2015 (SUPEE-5344 available here). Store owners and administrators are urged to apply the patch immediately if they haven’t done so already.

RECOMMENDED ACTIONS:

1. Check for unknown files in the web server document root directory. If you find any, you may be impacted.

2. Download and implement 2 patches from the Magento Community Edition download page.

    • SUPEE-5344 – Addresses a potential remote code execution exploit (Added Feb 9, 2015)
    • SUPEE-1533 – Addresses two potential remote code execution exploits (Added Oct 3, 2014)

3. Implement and test the patches in a development environment first to confirm that they work as expected before deploying them to your production site.

Note: Different versions of the patch are available for Magento Community Edition 1.4.x through 1.9.x.

HOW TO DOWNLOAD?

You can access Magento’s Community Edition download page from here. Find “Magento Community Edition Patches” section and download the right security patch.


Cheap web Hosting


How to Setup Mod Security on CentOs Web Panel


Cheap reseller Hosting


centos-web-panel

Setup Mod Security

ModSecurity is an open source, cross-platform web application firewall (WAF) module. Known as the “Swiss Army Knife” of WAFs, it enables web application defenders to gain visibility into HTTP(S) traffic and provides a power rules language and API to implement advanced protections.

list of the most important usage scenarios :

  • Real-time application security monitoring and access control
  • Virtual patching
  • Full HTTP traffic logging
  • Continuous passive security assessment
  • Web application hardening
  • Something small, yet very important to you

Find more details of Mod Security

Step 1 – Go to Security then Click on Mod Security menu:

cwp10

Step 2 – By default this module is not installed. Click on Install Mod Security Tab .

cwp11

Once you click on it you can see the below message :

cwp12

Once its install you can see the message :

cwp13

That’s it. Mod_security includes some necessary rules  by default. But however if you want to go advance, you can manually edit each configuration file and adjust the rules as per your requirement.


Cheap web Hosting


How to Enable Config Server Firewall (CSF) on Centos Web Panel


Cheap reseller Hosting


centos-web-panel

Step 1 – Go to Security then Click on CSF Firewall

cwp7

 

 

 

 

 

 

 

 

Click on CSF Firewall and Scroll down . Then you can see an Option to Enable firewall :

cwp8

 

 

 

 

Click on Firewall Enable .

Step 3 – Once activated, you can now edit few lines of CSF Configuration. Click on the Firewall Configuration button. And Add the SSH Port which we have changed in my  Previous Post  how to change SSH Port . You can see the New Port number added in CSF configuration file :

cwp9

 

Once done, click the Save Changes button.


Cheap web Hosting


How to change default SSH port on CentOS Web Panel (CWP)


Cheap reseller Hosting


centos-web-panel

 

 

Step 1 – Login to CWP Admin page as root via:

http://server-ip-address:2030/login.php

cwp1

 

 

 

 

 

 

 

 

Step 2 – Now go to Services Config then click on SSH Configuration:

cwp2

 

 

 

 

Once you click on SSH Configuration scroll down and you can see an option to Create File Backup

cwp3

 

 

 

Click on the Button to take the backup . Once the Backup is completed you can see the below message :

cwp4

 

 

Step 3 – Find the Following Line :

#port 22

Remove the # symbol and change the “22” (it is default port) to to any number between 1025 and 65536, For example is port 9999.

cwp5

 

 

 

 

 

 

Now click on Save Changes and you can see the message :

cwp6

 

 

 

Done .

 

 

 


Cheap web Hosting


London Railway System Passwords Exposed During TV Documentary


Cheap reseller Hosting


The Weakest Link In the Information Security Chain is still – Humans.

And this news has ability to prove this fact Right.

One of London’s busiest railway stations has unwittingly exposed their system credentials during a BBC documentary. The sensitive credentials printed and attached to the top of a station controller’s monitor were aired on Wednesday night on BBC.

What could be even


Source: Hacker News


Cheap web Hosting


Mumblehard Malware Targets Linux and FreeBSD Servers


Cheap reseller Hosting


Thousands of computers and web servers running Linux and FreeBSD operating systems have been infected over past five years with sophisticated malware that turn the machines into spambots.

The new Linux malware, discovered by the security researchers from the antivirus provider Eset, has been dubbed “Mumblehard” because it is Muttering spam from your servers, says Eset 23-page long report (


Source: Hacker News


Cheap web Hosting


Hacker Finds a Simple Way to Bypass Google Password Alert


Cheap reseller Hosting


Less than 24 hours after Google launched the new Phishing alert extension Password Alert, a security researcher was able to bypass the feature using deadly simple exploits.

On Wednesday, the search engine giant launched a new Password Alert Chrome extension to alert its users whenever they accidentally enter their Google password on a carefully crafted phishing website that aimed at


Source: Hacker News


Cheap web Hosting


Fastest Operating System for Quantum Computing Developed By Researchers


Cheap reseller Hosting


So far, we just have heard about Quantum computing that could make even complex calculations trivial, but there are no practical Quantum computers exist.
However, the dream of Quantum computers could become a reality in coming future.
Cambridge Quantum Computing Limited (CQCL) has build a new Fastest Operating System aimed at running the futuristic superfast quantum computers.
The new operating


Source: Hacker News


Cheap web Hosting


1 15 16 17 18 19 25