CVE-2019-11894

CVE-2019-11894 concerns an improper access control in the backup mechanism of the Bosch Smart Home Controller (SHC) prior to version 9.8.905. An attacker could download a backup directly after a legitimate backup completes, potentially exposing sensitive data. The public documents confirm the aff...

PT-2019-12551

Name of the Vulnerable Software and Affected Versions Bosch Smart Home Controller versions prior to 9.8.905 Description A potential improper access control issue exists in the backup mechanism of the Bosch Smart Home Controller. This issue may allow unauthorized download of a backup. To exploit...

PT-2019-12348

Name of the Vulnerable Software and Affected Versions Gila CMS version 1.10.1 Description The issue allows for absolute path traversal, enabling the reading of arbitrary files. This is possible through the admin/db backup?download= endpoint in the core/classes/db backup.php file. The download...

LG Smart IP Camera 1508190 File Disclosure

Exploit Title: LG Smart IP Camera 1508190 - Backup File Download Date: 2018-09-11 Exploit Author: Ege Balci Vendor Homepage: https://www.lg.com Software version: 1310250 " exit0 print"==========================================================================" print" Exploit Title: LG Smart IP...

Rvsitebuilder CMS - Database Backup Download Vulnerability

Exploit for php platform in category web applications Exploit Title: Rvsitebuilder CMS Database Backup Download Exploit Author: Hesam Bazvand Contact: email protected Software Link: http://www.rvsitebuilder.com Version: All Version Tested on: Windows 7 / Kali Linux Category: WebApps Dork :...

CVE-2018-7317

Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/...

CVE-2018-7317

Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/...

Design/Logic Flaw

Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/...

CVE-2018-7317

Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/...

CVE-2018-7317

CVE-2018-7317 describes an information-disclosure vulnerability in Joomla! Proclaim (com_biblestudy) component, version 9.1.1 and earlier. A direct request to a file under backup/ (backup SQL) allows an attacker to download a backup database file, exposing sensitive information. The issue is evid...

Joomla! Component Proclaim 9.1.1 - Backup File Download

Joomla! Component Proclaim 9.1.1 - Backup File Download Exploit Title: Joomla! Component Proclaim 9.1.1 - Backup Download Dork: N/A Date: 22.02.2018 Vendor Homepage: https://www.christianwebministries.org/ Software Link: https://extensions.joomla.org/extensions/extension/living/religion/proclaim/...

CVE-2018-7317: Exposure of Sensitive Information to an Unauthorized Actor

Backup Download exists in the Proclaim 9.1.1 component for Joomla! via a direct request for a .sql file under backup/...

Joomla! Component Proclaim 9.1.1 - Backup File Download

Exploit Title: Joomla! Component Proclaim 9.1.1 - Backup Download Dork: N/A Date: 22.02.2018 Vendor Homepage: https://www.christianwebministries.org/ Software Link: https://extensions.joomla.org/extensions/extension/living/religion/proclaim/ Software Download:...

Directory Traversal Vulnerability in Xiongshang Technology Website Building System

Xiongshang Network Technology Shanghai Co., Ltd. is an Internet company integrating website design, VI design, APP development and so on. A directory traversal vulnerability exists in the Xiongshang Technology website builder system. An attacker can exploit the vulnerability to download backup...

CVE-2017-2551

Vulnerability in Wordpress plugin BackWPup before v3.4.2 allows possible brute forcing of backup file for download...

CVE-2017-7315

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...

CVE-2017-7315: Missing Authentication for Critical Function

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin...

Humax Digital HG100R Backup File Download Vulnerability

The Humax Digital HG100R is a router from the Korean company Humax Digital. A security vulnerability exists in the Humax Digital HG100R version 2.0.6. The vulnerability can be exploited by an attacker to download a backup file and obtain the router certificate in plaintext...

WordPress Easy Full Backup Brute Forcer Exploit

Exploit for php platform in category web applications !/bin/bash database download brute forcer for https://wordpress.org/plugins/wp-easy-full-backup start date 01/24/2017 @larry0 The plugin wp-easy-full-backup creates wordpress backups that can be guessed This script will search for the day's...

Wiser 2.10 Backup Disclosure

Wiser 2.10 SIP SERVER - Backup download vulnerability =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.develsistemas.com.br/...