CVE-2026-32842

CVE-2026-32842 affects Edimax GS-5008PL firmware versions 1.00.54 and earlier. The root cause is insecure credential storage: admin credentials are stored in plaintext in configuration backup files (config.bin) and can be accessed by downloading the backup via fupload.cgi, enabling unauthorized a...

EUVD-2018-7950

Malware in sbrugna...

EUVD-2003-0013

Malware in sbrugna...

EUVD-2024-42739

Malicious code in bioql PyPI...

EUVD-2023-54441

Malicious code in bioql PyPI...

EUVD-2023-32062

Malicious code in bioql PyPI...

EUVD-2025-25715

Malicious code in bioql PyPI...

EUVD-2025-31576

Malicious code in bioql PyPI...

CVE-2025-9395

CVE-2025-9395 affects wangsongyan wblog 0.0.1. The vulnerability is in RestorePost of backup.go, where manipulation of the fileName parameter enables server-side request forgery (SSRF). It is remotely exploitable and an exploit is publicly available. Connected documents corroborate the issue and ...

CVE-2023-28365

A backup file vulnerability found in UniFi applications Version 7.3.83 and earlier running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored...

D-Link DI-7003GV2 /H5/backup.asp File Denial of Service Vulnerability

The D-Link DI-7003GV2 is a router from China-based AUO D-Link. The D-Link DI-7003GV2 suffers from a denial of service vulnerability that originates from improper access control in the function sub4983B0 in file /H5/backup.asp, which can be exploited by an attacker to cause a denial of service...

CVE-2024-56067

CVE-2024-56067 affects the WordPress plugin WP SuperBackup (versions

PT-2023-5025 · Unknown · Conversations

Name of the Vulnerable Software and Affected Versions: Conversations affected versions not specified Description: The issue is related to insufficient input validation in the Conversations instant messaging software. Exploitation of this issue could allow a remote attacker to gain unauthorized...

CVE-2023-28365

A backup file vulnerability found in UniFi applications Version 7.3.83 and earlier running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored...

PT-2023-21675 · Ubiquiti · Unifi

Name of the Vulnerable Software and Affected Versions: UniFi versions 7.3.83 and earlier Description: A backup file vulnerability found in UniFi applications running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored...

Versa Networks Versa Director 安全漏洞

Versa Networks Versa Director is a virtualization and service creation platform from Versa Networks, USA. It simplifies the creation, automation and delivery of services using Versa FlexVNF. A security vulnerability exists in Versa Director that stems from an unencrypted backup file containing...

CVE-2019-16155

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more...

Humax Digital HG100R Root Credentials Disclosure Vulnerability

The Humax Digital HG100R is a router from the Korean company Humax Digital. A security vulnerability exists in the Humax Digital HG100R version 2.0.6. The vulnerability can be exploited by an attacker to obtain the root certificate from a backup file...