Lucene search
+L

14935 matches found

EUVD
EUVD
added 2025/12/31 9:30 p.m.11 views

EUVD-2025-206085

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclos...

8.7CVSS6.6AI score0.00257EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/12/31 9:30 p.m.13 views

EUVD-2025-206084

NuCom 11N Wireless Router 5.07.90 contains a privilege escalation vulnerability that allows non-privileged users to access administrative credentials through the configuration backup endpoint. Attackers can send a crafted HTTP GET request to the backup configuration page with a specific cookie to...

8.7CVSS6.6AI score0.00277EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/31 7:15 p.m.9 views

CVE-2021-47741

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclos...

8.7CVSS0.00257EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/31 7:15 p.m.11 views

CVE-2021-47726

NuCom 11N Wireless Router 5.07.90 contains a privilege escalation vulnerability that allows non-privileged users to access administrative credentials through the configuration backup endpoint. Attackers can send a crafted HTTP GET request to the backup configuration page with a specific cookie to...

8.7CVSS0.00277EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/31 6:39 p.m.5 views

CVE-2021-47741 ZBL EPON ONU Broadband Router V100R001 Privilege Escalation via Configuration Endpoint

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclos...

8.7CVSS6.8AI score0.00257EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/31 6:39 p.m.38 views

CVE-2021-47741 ZBL EPON ONU Broadband Router V100R001 Privilege Escalation via Configuration Endpoint

ZBL EPON ONU Broadband Router V100R001 contains a privilege escalation vulnerability that allows limited administrative users to elevate access by sending requests to configuration endpoints. Attackers can exploit the vulnerability by accessing the configuration backup or password page to disclos...

8.7CVSS0.00257EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/31 6:39 p.m.43 views

CVE-2021-47726

CVE-2021-47726 affects NuCom 11N Wireless Router firmware 5.07.90. The vulnerability is a privilege-escalation flaw in the configuration backup endpoint that allows non-privileged users to retrieve the admin password. An attacker can send a crafted HTTP GET request to the backup configuration pag...

8.7CVSS6.8AI score0.00277EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/12/31 6:39 p.m.6 views

CVE-2021-47726 NuCom 11N Wireless Router 5.07.90 Privilege Escalation via Configuration Backup

NuCom 11N Wireless Router 5.07.90 contains a privilege escalation vulnerability that allows non-privileged users to access administrative credentials through the configuration backup endpoint. Attackers can send a crafted HTTP GET request to the backup configuration page with a specific cookie to...

8.7CVSS6.8AI score0.00277EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/12/31 6:39 p.m.36 views

CVE-2021-47726 NuCom 11N Wireless Router 5.07.90 Privilege Escalation via Configuration Backup

NuCom 11N Wireless Router 5.07.90 contains a privilege escalation vulnerability that allows non-privileged users to access administrative credentials through the configuration backup endpoint. Attackers can send a crafted HTTP GET request to the backup configuration page with a specific cookie to...

8.7CVSS0.00277EPSS
SaveExploits1References4
NVD
NVD
added 2025/12/31 9:15 a.m.7 views

CVE-2025-62992

Cross-Site Request Forgery CSRF vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through = 2.3.11...

8.1CVSS0.00181EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/31 9:15 a.m.7 views

CVE-2025-62992

Cross-Site Request Forgery CSRF vulnerability in Everest themes Everest Backup allows Path Traversal.This issue affects Everest Backup: from n/a through 2.3.9...

8.1CVSS5.8AI score0.00181EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/31 8:59 a.m.35 views

CVE-2025-62992 WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through = 2.3.11...

6.5CVSS0.00181EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/31 8:59 a.m.19 views

CVE-2025-62992

Technical details for CVE-2025-62992 are not publicly available in the provided connected documents. The Initial Description notes a CSRF/Path Traversal issue in Everest Backup

8.1CVSS5.9AI score0.00181EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/31 8:59 a.m.3 views

CVE-2025-62992 WordPress Everest Backup plugin <= 2.3.11 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in everestthemes Everest Backup everest-backup allows Path Traversal.This issue affects Everest Backup: from n/a through = 2.3.11...

6.5CVSS5.9AI score0.00181EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/31 8:57 a.m.9 views

WordPress Everest Backup plugin <= 2.3.9 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Everest Backup versions = 2.3.9...

8.1CVSS6.7AI score0.00181EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.11 views

WordPress WP Database Backup plugin < 5.2 - Unauthenticated OS Command Injection vulnerability

Unauthenticated OS Command Injection vulnerability discovered by WordFence in WordPress Plugin WP Database Backup versions 5.2...

9.8CVSS5.6AI score0.16682EPSS
SaveExploits2References1Affected Software1
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.13 views

WordPress WPvivid Backup & Migration plugin <= 0.9.120 - Authenticated (Admin+) Arbitrary Directory Creation vulnerability

Authenticated Admin+ Arbitrary Directory Creation vulnerability discovered by blue0x1 in WordPress Plugin WPvivid Backup and Migration versions = 0.9.120...

2.7CVSS6.7AI score0.00425EPSS
SaveExploits2References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/31 12:0 a.m.23 views

PT-2025-54303

Name of the Vulnerable Software and Affected Versions Everest Backup versions through 2.3.9 Description A Cross-Site Request Forgery CSRF issue exists in Everest Backup, potentially allowing Path Traversal. Recommendations Versions prior to 2.3.9 are affected. At the moment, there is no informati...

8.1CVSS6.3AI score0.00181EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2025/12/31 12:0 a.m.12 views

The vulnerability of the backup software regarding incorrect use of standard permissions allows a perpetrator to escalate their privileges and execute arbitrary commands.

The vulnerability of the backup software relates to errors in the use of standard permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands by sending a specially created file...

7.8CVSS6AI score0.0039EPSS
SaveExploits0References5Affected Software1
CNNVD
CNNVD
added 2025/12/31 12:0 a.m.8 views

WordPress plugin Everest Backup 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site...

8.1CVSS6.4AI score0.00181EPSS
SaveExploits0References1
Rows per page
Query Builder