PT-2024-24932

Name of the Vulnerable Software and Affected Versions NewPipe versions 0.13.4 through 0.26.1 Description The issue arises from the import of backups in NewPipe, which uses Java's Object Serialization Stream Protocol. This can lead to Arbitrary Code Execution if a user imports a malicious backup...

CVE-2024-29965

CVE-2024-29965 affects Brocade SANnav versions prior to 2.3.1 and 2.3.0a. The issue allows backups created via the web UI or SSH to be world-readable, enabling a local attacker to recover backup files, restore them on a malicious appliance, and obtain the passwords for all switches. Documents con...

A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the passwords of all the switches (CVE-2024-29965).

In Brocade SANnav before v2.3.1, and v2.3.0a, it is possible to back up the appliance from the web interface or the command line interface "SSH". The resulting backups are world-readable. A local attacker can recover backup files, restore them to a new malicious appliance, and retrieve the...

CVE-2024-3124

A vulnerability classified as problematic has been found in fridgecow smartalarm 1.8.1 on Android. This affects an unknown part of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible...

CVE-2024-3124

CVE-2024-3124 affects fridgecow smartalarm 1.8.1 on Android. The vulnerability targets the Backup File Handler component (unknown part of androidmanifest.xml) and leads to exposure of backup files to an unauthorized control sphere. An attack can be launched on the physical device; the exploit has...

Replify-Messenger 安全漏洞

Replify-Messenger is a text messenger with tons of features by Vidit Gupta Personal Developer. A security vulnerability exists in Replify-Messenger version 1.0, which stems from some unknown handling in the presence of androidmanifest.xml in the component Backup File Handler, leading to the...

GHSA-M7HX-HW6H-MQMC Grav File Upload Path Traversal

Summary Grav is vulnerable to a file upload path traversal vulnerability, that can allow an adversary to replace or create files with extensions such as .json, .zip, .css, .gif, etc. This vulnerabiltiy can allow attackers to inject arbitrary code on the server, undermine integrity of backup files...

CVE-2024-27921

Grav is an open-source, flat-file content management system. A file upload path traversal vulnerability has been identified in the application prior to version 1.7.45, enabling attackers to replace or create files with extensions like .json, .zip, .css, .gif, etc. This critical security flaw pose...

CVE-2024-27921 Grav File Upload Path Traversal vulnerability

Grav is an open-source, flat-file content management system. A file upload path traversal vulnerability has been identified in the application prior to version 1.7.45, enabling attackers to replace or create files with extensions like .json, .zip, .css, .gif, etc. This critical security flaw pose...

CVE-2024-27921 Grav File Upload Path Traversal vulnerability

Grav is an open-source, flat-file content management system. A file upload path traversal vulnerability has been identified in the application prior to version 1.7.45, enabling attackers to replace or create files with extensions like .json, .zip, .css, .gif, etc. This critical security flaw pose...

CVE-2024-27921 Grav File Upload Path Traversal vulnerability

Grav is an open-source, flat-file content management system. A file upload path traversal vulnerability has been identified in the application prior to version 1.7.45, enabling attackers to replace or create files with extensions like .json, .zip, .css, .gif, etc. This critical security flaw pose...

CVE-2024-25811

An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information...

CVE-2024-25811

An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information...

Weather app security breach

Weather app is a weather forecasting app. A security vulnerability exists in Weather app version 1.0.0. An attacker exploited the vulnerability to cause backup files to be exposed to unauthorized control...

CVE-2024-2364

CVE-2024-2364 concerns Musicshelf for Android (versions 1.0–1.1) where an issue in the Backup Handler’s androidmanifest.xml allows exposing backup files to an unauthorized control sphere. The vulnerability arises from an unknown function in the manifest, enabling a physical-device–level attack wi...

Musicshelf Security Breach

Musicshelf is a music shelf software by RedNesto Individual Developer. It is used to help manage sheet music and various related assets. A security vulnerability exists in Musicshelf versions 1.0, 1.1, which stems from the inclusion of unknown functions in androidmanifest.xml in the component...

BIT-MOODLE-2021-3943

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

BIT-MOODLE-2022-40314

A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified...

CVE-2024-25811

An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information...

CVE-2024-25811

An access control issue in Dreamer CMS v4.0.1 allows attackers to download backup files and leak sensitive information. This vulnerability stems from an Access Control Error within the content management system. No information regarding a patched version or specific remediation is currently provi...