PT-2026-106471

Unauthenticated Sensitive Data Exposure in Norvis Backup = 1.1.0 versions...

PT-2026-106468

Unauthenticated Sensitive Data Exposure in SafeSnap – Verified WordPress Backup & Restore = 2.1.2 versions...

Lifecycle-Based Design and Evaluation of Real-Time Backup Triggers for Ransomware Damage Mitigation

Ransomware continues to encrypt files during the interval between attack onset and detection. Real-time backups can mitigate this damage by preserving files before they are modified. The previously proposed Real-Time Open-File Backup System ROFBS triggers backups primarily on file-open events...

PT-2026-107228

Name of the Vulnerable Software and Affected Versions Veeam Backup & Replication versions prior to 12.3.2 P4 Description A deserialization issue allows a user with Backup Viewer privileges to execute arbitrary code as SYSTEM on the backup server. Deserialization is the process of converting a dat...

Veeam Backup and Replication < 12.3.2 (kb4934)

The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4934 advisory. - A reflected cross-site scripting vulnerability in Veeam Backup Enterprise Manager allows an attacker to execut...

PT-2026-106388

Unauthenticated Sensitive Data Exposure in SiteVault – Backup, Restore, Migration & Cloning = 1.5.17 versions...

Access Denied for ListBuckets/GetBuckets on S3-Compatible Repositories

Challenge When adding an S3-compatible object storage repository to Veeam Backup & Replication, or during regular use of an existing one, Access Denied events related to a ListBuckets/GetBuckets operation may appear in the object storage system's access logs. These issues occur even though the...

Vulnerabilities Resolved in Veeam Backup & Replication 12.3.2 P4

Article Applicability All vulnerabilities listed in this article: Affect only Veeam Backup & Replication 12.3.2 P3 build 12.3.2.4854 and older builds. Are resolved in Veeam Backup & Replication 12.3.2 P4 build 12.3.2.4934. Do not affect any Veeam Backup & Replication version 13 builds. Customers...

CVE-2026-27944

CVE-2026-27944 - Descarga y Descifrado de Copia de Seguridad No Autenticado en Nginx UI https://img.shields.io/badge/python-3.6+-blue.svg https://img.shields.io/badge/license-MIT-green https://img.shields.io/badge/PoC-Exploit-red Un exploit de prueba de concepto PoC para CVE‑2026‑27944, una...

CVE-2026-103546

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

CVE-2026-103546

The MongoDB Controllers for Kubernetes are vulnerable to improper validation of Ops Manager backup configuration . An attacker with permissions to modify an OpsManager custom resource can trigger unintended administrative changes in Ops Manager. This vulnerability specifically impacts deployments...

Improper validation of Ops Manager configuration in MongoDB Kubernetes Operator

In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation...

CVE-2021-27877-PoC

Prueba de concepto de CVE-2021-27877 Este repositorio contiene una versión modificada del módulo original de Rapid7 Metasploit para CVE-2021-27877 que afecta al agente Veritas Backup Exec. Durante mis pruebas, el módulo original de Metasploit identificaba correctamente el objetivo como vulnerable...

CVE-2021-24155.rb

WordPress-Backup-RCE Este módulo de Metasploit permite a un atacante con una cuenta privilegiada de WordPress lanzar una shell inversa debido a una vulnerabilidad de carga de archivos arbitraria en el plugin de WordPress Backup Guard versiones anteriores a la 1.6.0. Esto se debe a una verificació...

POC-CVE-2025-24104-Py

PoC: Exfiltración de Archivos en iOS vía Manipulación de Backup ADVERTENCIA MUY IMPORTANTE: ESTE SOFTWARE ES UNA PRUEBA DE CONCEPTO PoC CON FINES EDUCATIVOS Y DE INVESTIGACIÓN EN SEGURIDAD ÚNICAMENTE. NO UTILICES este script en dispositivos para los que no tengas consentimiento explícito y por...

WordPress SafeSnap – Verified WordPress Backup & Restore plugin <= 2.1.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin SafeSnap – Verified WordPress Backup & Restore versions = 2.1.2...

WordPress WXD Backup Lite plugin <= 1.0.2 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin WXD Backup Lite versions = 1.0.2...

WordPress Norvis Backup plugin <= 1.1.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Norvis Backup versions = 1.1.0...

WordPress Snapshotify – All-in-One Backup & Restore & Migrate plugin <= 1.3.2 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Snapshotify All-in-One Backup & Restore & Migrate versions = 1.3.2...

CVE-2023-6553-PoC

CVE-2023-6553 PoC LFI to RCE Ejecución remota de código no autenticada en Backup Migration plugin de WordPress. Ejecución $ python exploit.py Se ejecuta el siguiente script PHP. out.txt; ? Referencias Ejecución remota de código no autenticada crítica encontrada en el plugin Backup Migration...