CVE-2026-79763 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

EUVD-2026-86120

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor...

CVE-2026-1357

CVE-2026-1357 -- WPvivid RCE Unauthenticated Remote Code Execution RCE in WPvivid Backup & Migration 800%2C000-brightgreen?style=for-the-badge" alt="Installs" Critical flaw impacting over 800,000–900,000+ WordPress sites Unauthenticated arbitrary PHP upload → full server compromise 🌩️ Overview...

veeam-velociraptor

Veeam Backup & Replication Velociraptor artifacts - PoC This repository contains a collection of Velociraptor artifacts acting as a proof-of-concept for a remote Veeam Backup & Replication forensics pipeline: artifacts/ contains the artifact definitions tools/ contains a qemu-img.zip archive that...

CVE-2026-1357

🧨 CVE-2026-1357 – WPvivid Null-Key Exploit Tool CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerability: Unauthenticated Arbitrary File Upload → Remote Code Execution CVE: CVE-2026-1357 – CVSS 9.8 Critical GitHub: https://github.com/Nxploited Telegram:...

CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress = 2.3.3 - Carga arbitraria de archivos no autenticada Descripción El plugin Super Backup & Clone - Migrate for WordPress para WordPress es vulnerable a la carga arbitraria de archivos debido a la falta de validación del tipo de archivo y ...

CVE-2023-30146

CVE-2023-30146 - Exploit de Cámara Web Assmann/HooToo - Exposición de Datos Sensibles Descripción Se descubrió un problema en las cámaras IP de las marcas HooToo y Assmann. El firmware almacena las credenciales del administrador y del usuario en la copia de seguridad en texto plano. La copia de...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 on Android 12, 13 before the March 2024 security update for data backup Usage ./CVE-2024-0044-EXP.sh Sample ./CVE-2024-0044-EXP.sh com.tencent.mm Description Vulnerability discovery https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.ht...

CVE-2024-9290

CVE-2024-9290 Exploit Tool | Super Backup & Clone Vulnerability The tool targets WordPress websites that use the Super Backup & Clone plugin and are vulnerable to arbitrary file upload. It attempts to upload a malicious shell into the /wp-content/uploads/isnapshots/ directory. Once uploaded, the...

CVE-2023-6553

CVE-2023-6553 Desarrollo de exploit para CVE-2023-6553 en el plugin Backup en Wordpress Esto es una CVE crítica con una puntuación CVSS de 9.8 La vulnerabilidad permite al atacante enviar comandos al servidor que ejecuta la versión vulnerable del plugin Versión vulnerable Backup = 1.3.7...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Vulnerabilidad en Veeam Backup & Replication Descripción de la vulnerabilidad Veeam Backup & Replication contiene una vulnerabilidad que permite obtener las credenciales cifradas almacenadas en la base de datos de configuración, lo que permite a los atacantes acceder a los hosts ...

CVE-2018-4878-

-cms Server cluster batch identification of cms, batch backup search, batch injection. VIP group version backup...

CVE-2024-40711

CVE-2024-40711 Exploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 See our blog post for technical details https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC in Action root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Veeam -c...

CVE-2017-14105

Aerohive HiveManager Classic Privilege Escalation Vulnerability Name Aerohive HiveManager Classic Privilege Escalation Vulnerability Systems Affected HiveManager Classic 8.0r1 8.1r1 Severity Medium 6.6/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:H/RC:C Vendor http://www.aerohive.com/...

WordPress_Backup_Migration-RCE_Unauthenticated

CVE-2023-6553 — The Backup Migration plugin for WordPress - Reverse Shell An extended version of Chocapikk's CVE-2023-6553 exploit that adds a one-command reverse shell mode on top of the original interactive webshell. Vulnerability CVE-2023-6553 — Unauthenticated Remote Code Execution in the...

CVE-2025-43537

CVE-2025-43537 Crédito de Seguridad de Apple Investigador: Al Sadman Awal Oficialmente acreditado por Apple Product Security por la divulgación responsable de CVE-2025-43537. Resumen CVE-2025-43537 es una vulnerabilidad de seguridad identificada durante una investigación de seguridad independient...

everest-backup-cve-2025-11380

CVE-2025-11380 Código de prueba de concepto para CVE-2025-11380 - acceso no autenticado a copias de seguridad en el plugin Everest Backup de WordPress. El enlace al artículo del blog estará disponible pronto...

EUVD-2026-85713

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mificonfig.bin of the component Configuration Backup Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been releas...

CVE-2026-96606

A security flaw has been discovered in LB-Link BL-CPE600EU 5.8.13. This vulnerability affects unknown code of the file Mificonfig.bin of the component Configuration Backup Handler. The manipulation results in information disclosure. The attack can be launched remotely. The exploit has been releas...

CVE-2026-96606

A security flaw in the LB-Link BL-CPE600EU (version 5.8.13) allows for information disclosure via the Configuration Backup Handler component. The vulnerability specifically affects unknown code within the Mifi_config.bin file. This flaw can be exploited remotely to disclose information. A public ...