Lucene search
+L

15171 matches found

Cvelist
Cvelist
added 2024/03/17 9:00 p.m.46 views

CVE-2024-2567 jurecapuder AndroidWeatherApp Backup File androidmanifest.xml backup

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to a...

1.8CVSS4.1AI score0.00213EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/03/17 12:00 a.m.12 views

PT-2024-21080 · Jurecapuder · Androidweatherapp

Name of the Vulnerable Software and Affected Versions: jurecapuder AndroidWeatherApp version 1.0.0 Description: A problematic vulnerability was found in the AndroidWeatherApp, affecting an unknown function of the file androidmanifest.xml of the component Backup File Handler. This leads to exposur...

1.8CVSS6.9AI score0.00213EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2024/03/17 12:00 a.m.9 views

Weather app security breach

Weather app is a weather forecasting app. A security vulnerability exists in Weather app version 1.0.0. An attacker exploited the vulnerability to cause backup files to be exposed to unauthorized control...

1.8CVSS6.6AI score0.00213EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/16 12:00 a.m.16 views

WordPress Plugin Backuply Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.9CVSS6.9AI score0.00919EPSS
SaveExploits0References5
OSV
OSV
added 2024/03/14 2:15 a.m.11 views

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

8.8CVSS5.9AI score0.25887EPSS
SaveExploits2References3
NVD
NVD
added 2024/03/14 2:15 a.m.19 views

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

8.8CVSS7.2AI score0.25887EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2024/03/14 12:00 a.m.11 views

Vinchin Backup and Recovery Security Vulnerabilities

Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery 7.2 and earlier versions, which stems from vulnerabilit...

8.8CVSS7.1AI score0.25887EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
added 2024/03/14 12:00 a.m.15 views

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

7.5AI score0.25887EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
added 2024/03/14 12:00 a.m.11 views

The vulnerability of the Dell EMC NetWorker backup and data recovery system, related to insufficient protection of registration data, allows a perpetrator to obtain user registration data.

The vulnerability of the Dell EMC NetWorker backup and data recovery system lies in the insufficient protection of registration data. Exploiting these vulnerabilities could allow attackers to obtain user registration data...

7.8CVSS6.6AI score0.00136EPSS
SaveExploits0References2Affected Software1
Packet Storm
Packet Storm
added 2024/03/14 12:00 a.m.235 views

Vinchin Backup And Recovery 7.2 Command Injection

CVE ID: CVE-2024-25228 Title: Authenticated Command Injection Vulnerability in ManoeuvreHandler.class.php of Vinchin Backup & Recovery Versions 7.2 and Earlier Description: A critical security vulnerability has been discovered in the getVerifydiyResult function within the ManoeuvreHandler.class.p...

7.4AI score0.25887EPSS
SaveExploits2
Cvelist
Cvelist
added 2024/03/14 12:00 a.m.31 views

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

7.4AI score0.25887EPSS
SaveExploits2References2
CVE
CVE
added 2024/03/14 12:00 a.m.58 views

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and earlier is affected by an Authenticated Remote Code Execution (RCE) in the getVerifydiyResult function of ManoeuvreHandler.class.php. Sources confirm the vulnerability exists in versions 7.2 and earlier and stems from inadequate input validation, notably in the...

8.8CVSS7.4AI score0.25887EPSS
SaveExploits2References3Affected Software1
OSV
OSV
added 2024/03/13 4:15 p.m.9 views

CVE-2024-1383

The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 0.9.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

6.1CVSS6AI score0.0061EPSS
SaveExploits0References3
CVE
CVE
added 2024/03/13 3:26 p.m.84 views

CVE-2024-1383

CVE-2024-1383 affects the WPvivid Backup for MainWP WordPress plugin. It is a Reflected XSS via the id parameter in all versions up to 0.9.32 due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts when a user is tricked into clicking a lin...

6.1CVSS6.9AI score0.0061EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.11 views

PT-2024-2557 · Vinchin · Vinchin Backup & Recovery

Name of the Vulnerable Software and Affected Versions: Vinchin Backup and Recovery versions 7.2 and earlier Description: The issue is related to the getVerifydiyResult function, which is vulnerable to Authenticated Remote Code Execution RCE. This vulnerability can be exploited by a remote attacke...

9CVSS7.5AI score0.25887EPSS
SaveExploits2References8
zdt
zdt
added 2024/03/11 12:00 a.m.362 views

Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 IDOR Exploit

!/usr/bin/python3 Title: Hitachi NAS HNAS System Management Unit SMU Backup & Restore IDOR Vulnerability CVE: CVE-2023-5808 Date: 2023-12-13 Exploit Author: Arslan Masood @arszilla Vendor: https://www.hitachivantara.com/ Version: --id --sso " Create --host argument: parser.addargument "--host",...

7.6CVSS7AI score0.00544EPSS
SaveExploits5
Exploit DB
Exploit DB
added 2024/03/11 12:00 a.m.300 views

Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 - IDOR

!/usr/bin/python3 Title: Hitachi NAS HNAS System Management Unit SMU Backup & Restore IDOR Vulnerability CVE: CVE-2023-5808 Date: 2023-12-13 Exploit Author: Arslan Masood @arszilla Vendor: https://www.hitachivantara.com/ Version: --id --sso " Create --host argument: parser.addargument "--host",...

7.6CVSS6.7AI score0.00544EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2024/03/11 12:00 a.m.396 views

Hitachi NAS SMU Backup And Restore Insecure Direct Object Reference

!/usr/bin/python3 Title: Hitachi NAS HNAS System Management Unit SMU Backup & Restore IDOR Vulnerability CVE: CVE-2023-5808 Date: 2023-12-13 Exploit Author: Arslan Masood @arszilla Vendor: https://www.hitachivantara.com/ Version: --id --sso " Create --host argument: parser.addargument "--host",...

7.6CVSS7.4AI score0.00544EPSS
SaveExploits5
OSV
OSV
added 2024/03/10 11:15 p.m.10 views

CVE-2024-2364

A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch...

4.6CVSS4.7AI score0.00333EPSS
SaveExploits1References3
NVD
NVD
added 2024/03/10 11:15 p.m.31 views

CVE-2024-2364

A vulnerability classified as problematic has been found in Musicshelf 1.0/1.1 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup Handler. The manipulation leads to exposure of backup file to an unauthorized control sphere. It is possible to launch...

4.6CVSS3.7AI score0.00333EPSS
SaveExploits1References3
Rows per page
Query Builder