CVE-2024-40711

CVE-2024-40711 Exploit para Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 Vea nuestra publicación en el blog para detalles técnicos https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC en Acción CVE-2024-40711.exe -f binaryformatter -g Veeam -...

CVE-2017-14105

Vulnerabilidad de escalada de privilegios en Aerohive HiveManager Classic Nombre Vulnerabilidad de escalada de privilegios en Aerohive HiveManager Classic Sistemas afectados HiveManager Classic 8.0r1 8.1r1 Severidad Media 6.6/10 Impacto CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:H/RC:C...

drs-malware-scan

Análisis de escaneo de malware en servidores on-premises utilizando servicios de AWS Desafíos de la detección de malware en entornos on-premises Para los equipos de seguridad, puede ser difícil monitorear continuamente todos los servidores on-premises debido a restricciones presupuestarias y de...

reload.sh

reload.sh Don't do it... Please don't do it on live systems e.g. production or on your private computer where you stored critical data. This recipe show you how to install fresh system where other system exist and running. It's really cool and amazing but very risky! If you want to go into the...

reload.sh

reload.sh 하지 마세요... 절대로 실제 시스템예: 프로덕션이나 중요한 데이터가 저장된 개인 컴퓨터 에서 실행하지 마세요. 이 레시피는 다른 시스템이 이미 설치되어 실행 중인 상태에서 새 시스템을 설치하는 방법을 보여줍니다. 정말 멋지고 놀랍지만 매우 위험합니다! 만약 혼란의 늪에 빠져보고 싶다면 계속 읽어보세요. 왜 만들었나요? 저는 실험을 좋아합니다. 사물이 어떻게 작동하는지 알고 싶어하기 때문입니다. 실험을 통해 더 까다로운 개념들을 이해하고 볼 수 있습니다. 오래전, 이 방법이 제 목숨을 구해준 적이 있지만 정말...

bfac

BFAC Pruebas avanzadas de artefactos de archivos de respaldo para aplicaciones web BFAC Backup File Artifacts Checker es una herramienta automatizada que verifica artefactos de respaldo que pueden revelar el código fuente de la aplicación web. Los artefactos también pueden provocar la filtración ...

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 Referencias homenaje a los grandes: Blog del autor de la vulnerabilidad CVE-2023-50386 Técnicas de evasión de Java Security Manager Evasión de la protección de reflexión en JDK 17 JNI para evadir RASP Principi...

CVE-2022-36537

CVE-2022-36537 Resumen R1Soft Server Backup Manager utiliza el framework ZK como framework principal. Su seguridad requiere que todas las partes de los proyectos Web3 presten más atención a las vulnerabilidades de seguridad de las diversas infraestructuras Web3 y las parcheen a tiempo para evitar...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — El plugin Backup Migration para WordPress - Shell reversa Una versión extendida del exploit CVE-2023-6553 de Chocapikk que añade un modo de shell reversa con un solo comando sobre la webshell interactiva original. Vulnerabilidad CVE-2023-6553 — Ejecución remota de código no...

CVE-2024-44258

CVE-2024-44258: Vulnerabilidad de symlink en el framework ManagedConfiguration Resumen CVE-2024-44258 destaca una vulnerabilidad de symlink dentro del framework ManagedConfiguration y el daemon profiled en dispositivos Apple. Al restaurar un backup manipulado, el proceso de migración no valida si...

CVE-2025-43537

CVE-2025-43537 Crédito de Seguridad de Apple Investigador: Al Sadman Awal Oficialmente acreditado por Apple Product Security por la divulgación responsable de CVE-2025-43537. Resumen CVE-2025-43537 es una vulnerabilidad de seguridad identificada durante una investigación de seguridad independient...

CVE-2026-86827

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

everest-backup-cve-2025-11380

CVE-2025-11380 Código de prueba de concepto para CVE-2025-11380 - acceso no autenticado a copias de seguridad en el plugin Everest Backup de WordPress. El enlace al artículo del blog estará disponible pronto...

CVE-2026-86827 BackWPup 3.3 - 5.7.6 - Unauthenticated Backup Job Execution via wp-cron.php

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

EUVD-2026-94748

The BackWPup WordPress plugin before 5.7.7 does not verify that a request to its cron-triggered backup execution handler actually originates from WordPress's internal scheduled-event dispatch, allowing unauthenticated attackers to force any existing backup job to run immediately, independent of i...

EUVD-2026-94749

The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archive library is used, allowing high-privileged users to write files outside the intended restore directory, potentially leading to remote code...

CVE-2026-86827

The BackWPup WordPress plugin (versions 3.3 through 5.7.6 ) contains a vulnerability where it fails to verify if requests to its cron-triggered backup execution handler originate from the internal WordPress scheduled-event dispatch. This allows unauthenticated attackers to force any existing back...

WordPress BackWPup plugin 3.3-5.7.6 - Unauthenticated Backup Job Execution vulnerability

Unauthenticated Backup Job Execution vulnerability discovered by Duy Tran in WordPress Plugin BackWPup versions 3.3-5.7.6...

CVE-2026-86826 BackWPup < 5.7.7 - Unauthenticated Sensitive Data Disclosure via Restore Working Directory on NGINX

The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive database dump and site...

EUVD-2026-94747

The BackWPup WordPress plugin before 5.7.7 does not properly restrict web access to the working directory it uses during backup restores, allowing unauthenticated attackers, on webservers that do not honour .htaccess rules such as NGINX, to download the full backup archive database dump and site...