CVE-2026-97240

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

CVE-2026-97197

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-97240 WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

CVE-2026-97240 WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

CVE-2026-97240

The StifLi Backup Tools plugin for WordPress (versions

EUVD-2026-89904

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-97197

The WordPress Backup & Migration plugin versions

CVE-2026-97197 WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

EUVD-2026-89898

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-32996

CVE-2026-32996 A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. Check blog post post for technical details. https://github.com/user-attachments/assets/8a570332-1cf6-4905-9107-8fcb973c9ce7 PoC CVE-2026-32996.exe "whoami C:\pwned.txt" + Found...

CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo

🔐 Laboratorio de Seguridad OAuth: Simulador Educativo CVE-2025-4679 Un entorno seguro y aislado para aprender sobre vulnerabilidades OAuth sin arriesgar sistemas reales 🚀 Inicio Rápido | 📚 Ruta de Aprendizaje | 🛡️ Entorno Seguro | 👥 Contribuyentes 📖 Resumen Este laboratorio educativo simula la...

CVE-2026-97197: Missing Authorization

Unauthenticated Broken Access Control in WordPress Backup & Migration = 1.6.0 versions...

CVE-2026-102130: Improper Control of Generation of Code

Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the application loaded it. An authenticated administrator could potentially use this to execute arbitrary code on the gateway as the underlying service...

AlmaLinux 9.2 [TuxCare] Security Update: mariadb / mariadb-backup / mariadb-common / mariadb-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1786469793)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1786469793 advisory. - In MariaDB server version through 11.8.5, when server audit plugin is enabled with serverauditevents variable configured with...

Linux Distros Unpatched Vulnerability : CVE-2026-85526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or...

CVE-2026-97240: Insertion of Sensitive Information Into Sent Data

Unauthenticated Sensitive Data Exposure in StifLi Backup Tools = 2.2.7 versions...

PT-2026-103563

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description Insufficient validation of uploaded backup content allows an authenticated administrator to influence how the application loads the file. This could lead to arbitra...

Rocky Linux 8.6 [CIQ] Security Update: mariadb / mariadb-backup / mariadb-backup-debuginfo / etc (ciqsa-2026_0104)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260104 advisory. This advisory aggregates security fixes for the mariadb SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-24805. Tenable has extracted the preceding description...

DEBIAN-CVE-2026-93853

Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman reads the snapshot identifiers from the...