ATutor-Instructor-Backup-Arbitrary-File

ATutor-강사-백업-익스플로잇 익스플로잇 제목: ATutor 2.2.4 'Backup' 원격 명령 실행 CVE-2019-12170 Google Dork: inurl:/ATutor/login.php 날짜: 5/13/2019 익스플로잇 작성자: liquidsky Joseph McPeters 공급업체 홈페이지: https://atutor.github.io/ 소프트웨어 링크: https://sourceforge.net/projects/atutor/files/latest/download 버전: 2.2.4 버전 2.2.4 및 이전 버...

CVE-2024-33298

CVE-2024-33298 Microweber = 2.0.9 における格納型クロスサイトスクリプティングの脆弱性 概要 : Microweber v.2.0.9 における格納型クロスサイトスクリプティングの脆弱性により、リモートの攻撃者がエンドポイント /admin/module/view?type=adminbackup の「新しいバックアップを作成」機能を介して任意のコードを実行できる可能性があります。 要件 : Microweber バージョン = 2.0.9 管理者アクセス権 再現手順 : 1. 管理者権限でアプリケーションに認証する 2. エンドポイント...

CVE-2026-58414 Network-AI: EnvironmentManager.backup() follows symlinked directories and copies files outside the environment root into backups

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, EnvironmentManager.backup recursively collects files using collectBackupFiles. collectBackupFiles uses statSyncfull, which follows symlinks. If data/ contains a symlink to a directory outside the environment roo...

MCP Server for ArangoDB 路径遍历漏洞

MCP Server for ArangoDB is a database interaction tool based on ArangoDB, developed by Alp Sarıyer. Versions of MCP Server for ArangoDB 0.4.7 and earlier had a path traversal vulnerability. This vulnerability stemmed from the function arangobackup in the MCP Interface component, which allowed for...

OpenEMR 操作系统命令注入漏洞

OpenEMR is a set of open-source medical management systems developed by the OpenEMR community. This system can be used for medical practice management, electronic medical records, prescription writing, and medical billing applications. Versions of OpenEMR prior to 8.0.0.2 had a vulnerability...

The vulnerability of the SSM backup function of the Sprecher SPRECON-E automation module allows a perpetrator to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the SSM backup function of the Sprecher Storage Manager software in the SPRECON-E automation module is related to insufficient protection of operational data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or execute...

PT-2025-53741

Name of the Vulnerable Software and Affected Versions Sprecher SPRECON-E affected versions not specified Description An issue exists in the SSM Sprecher Storage Manager backup function of the Sprecher SPRECON-E automation module firmware due to insufficient protection of service data. This could...

EUVD-2018-7311

Malware in sbrugna...

EUVD-2018-6257

Malware in sbrugna...

EUVD-2019-8741

Malware in sbrugna...

EUVD-2025-27743

Malicious code in bioql PyPI...

EUVD-2022-3080

Malicious code in bioql PyPI...

EUVD-2025-11492

Malicious code in bioql PyPI...

EUVD-2022-39263

Malicious code in bioql PyPI...

The vulnerability of the backup function of the D-Link DSL7740C router’s microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the backup function of the D-Link DSL7740C router’s microprogramming system is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-29516

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function...

D-Link DSL-7740C backup function command injection vulnerability

The D-Link DSL-7740C is a modem from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DSL-7740C backup function, which can be exploited by an attacker to execute arbitrary commands...

EUVD-2025-25753

An authentication bypass vulnerability exists which allows an unauthenticated attacker to control administrator backup functions, leading to compromise of passwords, secrets, and application session tokens stored by the Unified PAM...

CVE-2025-29516

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function...

CVE-2025-29516

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function...