26 matches found
Security Updates for Microsoft Azure Site Recovery (March 2022)
The Microsoft Azure Site Recovery installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
CVE-2022-24470
creationtimestamp| type| source ---|---|--- 2022-03-09 20:17:58+00:00| seen| https://t.me/cibsecurity/38596...
CVE-2022-24470
Azure Site Recovery Remote Code Execution Vulnerability...
CVE-2022-24470
Azure Site Recovery (VMware-to-Azure) contains a Remote Code Execution vulnerability tracked as CVE-2022-24470. Public sources in the Connected set confirm it enables executing code remotely and, in at least one listing, is part of a cluster of CVEs Microsoft released fixes for March 2022. The NV...
CVE-2021-24470
The CVE-2021-24470 affects the Yada Wiki WordPress plugin (versions before 3.4.1). Root cause: the shortcode anchor attribute was not sanitised/validated/escaped, causing a Stored XSS. Evidence in connected docs includes PoC payloads demonstrating exploitation and confirmation that the issue is f...