PT-2024-18376 · G Data · G Data Total Security

Name of the Vulnerable Software and Affected Versions: G DATA Total Security affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privilege...

G DATA Total Security Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the G DATA...

G DATA Total Security Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the G DATA...

VSS Snapshot Creation Delay on Server with DFSR Enabled

Article Applicability The issue described in this article affects earlier versions of Veeam Agent for Microsoft Windows VAW, however, the solution provided will only work with VAW 6.1.2 and higher. Challenge When backing up a server with the DFS feature enabled, the VSS snapshot creation step in...

PT-2024-18377 · G Data · G Data Total Security

Name of the Vulnerable Software and Affected Versions: G DATA Total Security affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privilege...

Backup fails with "Invalid argument Asynchronous request operation has failed. Failed to open storage for read/write access"

Challenge When attempting to write a restore point VBK or VIB to a Linux repository with a 4k logical block size, the task fails with the error: Invalid argument Asynchronous request operation has failed. Failed to open storage for read/write access Cause This error occurs when the storage device...

JetBrains TeamCity Cross-Site Scripting Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A cross-site scripting vulnerability exists in...

CVE-2024-3412

The WP STAGING WordPress Backup Plugin – Migration Backup Restore plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpstgprocessing AJAX action in all versions up to, and including, 3.4.3. This makes it possible for authenticated attackers, wi...

CVE-2024-3412

CVE-2024-3412 affects the WP STAGING WordPress Backup Plugin – Migration Backup Restore. It is vulnerable in versions

WordPress WP STAGING – Backup Duplicator & Migration Plugin <= 3.4.3 is vulnerable to Arbitrary File Upload

Software WP STAGING – Backup Duplicator & Migration Type Plugin Vulnerable versions = 3.4.3 Fixed in 3.5.0 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-3412 Patch priority Low CVSS severity Low 7.2 Developer Claim ownership PSID af3b452b0d24 Credits haidv35 Require...

WordPress plugin WP STAGING WordPress Backup Plugin – Migration Backup Restore 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

JetBrains TeamCity < 2023.11 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2023.11. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.11 stored XSS during restore from backup was possible CVE-2024-35302 - In JetBrains TeamCity before 2023.11 users with...

WP STAGING WordPress Backup Plugin – Migration Backup Restore < 3.5.0 - Admin+ Arbitrary File Upload

Description The WP STAGING WordPress Backup Plugin – Migration Backup Restore plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpstgprocessing AJAX action in all versions up to, and including, 3.4.3. This makes it possible for authenticated...

PT-2024-36073

Name of the Vulnerable Software and Affected Versions: PhpMyBackupPro version 2.3 Description: A vulnerability has been discovered that could allow an attacker to execute XSS through the "/phpmybackuppro/backup.php" API endpoint, using the comments and db parameters. This could allow an attacker ...

PhpMyBackupPro 跨站脚本漏洞

PhpMyBackupPro is a very easy to use, free web-based MySQL backup application from the Chris Younger project. A cross-site scripting vulnerability exists in PhpMyBackupPro version 2.3, which stems from a cross-site scripting vulnerability in /phpmybackuppro/scheduled.php, which allows an attacker...

Mageia: Security Advisory (MGASA-2024-0195)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability in the web interface of the Veeam Backup Enterprise Manager component allows a perpetrator to escalate their privileges.

The vulnerability in the web interface of the Veeam Backup Enterprise Manager component is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

MGASA-2024-0195 Updated mariadb packages fix security vulnerability and bugs

Additional bugs were fixed in the following components: InnoDB Spider Aria Backup JSON Optimization & Tuning Plugins Galera Scripts & Clients Server For the details see the vendor site...

MGASA-2024-0193 Updated roundcubemail packages fix security vulnerabilities

This is a security update to the stable version 1.6 of Roundcube Webmail. Fix cross-site scripting XSS vulnerability in handling SVG animate attributes. Reported by Valentin T. and Lutz Wolf of CrowdStrike. Fix cross-site scripting XSS vulnerability in handling list columns from user preferences...

Updated mariadb packages fix security vulnerability and bugs

Additional bugs were fixed in the following components: InnoDB Spider Aria Backup JSON Optimization & Tuning Plugins Galera Scripts & Clients Server For the details see the vendor site...