15129 matches found
Dell NetWorker Management Console Server-Side Arbitrary Code Execution Vulnerability
Dell NetWorker Management Console is a backup and recovery software from Dell USA. A security vulnerability exists in Dell NetWorker Management Console, which arises from the mishandling of a server-side vulnerability that can be exploited by an attacker to run arbitrary code...
CVE-2024-13555
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the cancelactions function. This makes it possible for...
HackerOne: The /reports/:id.json endpoint discloses potentially sensitive user attributes when reporter summary is present
The /reports/:id.json endpoint disclosed potentially sensitive user attributes, including the reporter's email, OTP backup codes, phone number, graphqlsecrettoken, and t-shirt size when a reporter summary was present...
CVE-2025-26779
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a through = 2.1.0...
CVE-2024-13609
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data includi...
CVE-2024-13609 1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data includi...
CVE-2024-13609 1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive data includi...
CVE-2024-13609
The CVE-2024-13609 issue affects the WordPress plugin “1 Click WordPress Migration Plugin.” All versions up to and including 2.2 are reported vulnerable to Sensitive Information Exposure via the class-ocm-backup.php, enabling unauthenticated attackers to access usernames and password hashes durin...
CVE-2024-13555 1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Cross-Site Request Forgery to Backup Process Cancellation
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the cancelactions function. This makes it possible for...
CVE-2024-13555 1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Cross-Site Request Forgery to Backup Process Cancellation
The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the cancelactions function. This makes it possible for...
PT-2025-6778 · Synology · Synology Active Backup For Business Agent
Name of the Vulnerable Software and Affected Versions: Synology Active Backup for Business affected versions not specified Description: Des vulnérabilités critiques ont été découvertes dans Synology Active Backup for Business, exposant les utilisateurs à des risques d'atteinte à la confidentialit...
PT-2025-6583
Name of the Vulnerable Software and Affected Versions 1 Click WordPress Migration Plugin – 100% FREE for a limited time versions up to, and including, 2.1 Description The issue allows unauthenticated attackers to extract sensitive data, including usernames and their respective password hashes,...
CMSimple Insecure Privilege Vulnerability
CMSimple is a PHP and HTML based content management system that helps users to quickly create simple and easy to use websites. CMSimple suffers from an insecure privilege vulnerability that can be exploited by an attacker to obtain sensitive information via a carefully crafted script to download...
WordPress 1 Click WordPress Migration plugin <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php vulnerability
Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php vulnerability discovered by Joshua Provoste in WordPress Plugin 1 Click WordPress Migration versions = 2.2...
WordPress 1 Click WordPress plugin <= 2.2 - Cross-Site Request Forgery to Backup Process Cancellation vulnerability
Cross-Site Request Forgery to Backup Process Cancellation vulnerability discovered by Joshua Provoste in WordPress Plugin 1 Click WordPress Migration versions = 2.2...
Dell NetWorker Management Console 安全漏洞
Dell NetWorker Management Console is a backup and recovery software from Dell USA. A security vulnerability exists in Dell NetWorker Management Console, which arises from the mishandling of a server-side vulnerability that can be exploited by an attacker to run arbitrary code...
1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Unauthenticated Sensitive Information Exposure via Database Backup in class-ocm-backup.php
Description The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2 via the class-ocm-backup.php. This makes it possible for unauthenticated attackers to extract sensitive...
1 Click WordPress Migration Plugin – 100% FREE for a limited time <= 2.2 - Cross-Site Request Forgery to Backup Process Cancellation
Description The 1 Click WordPress Migration Plugin – 100% FREE for a limited time plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the cancelactions function. This makes it possible...
CVE-2025-26779
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Fahad Mahmood Keep Backup Daily keep-backup-daily allows Path Traversal.This issue affects Keep Backup Daily: from n/a through = 2.1.0...