15198 matches found
WordPress Backup Migration 1.2.8 Backup Disclosure
Exploit Title: WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup Google Dork: intitle:"Index of /wp-content/plugins/backup-backup" AND inurl:"plugins/backup-backup/" Date: 2023-05-10 Exploit Author: Wadeek Vendor Homepage: https://backupbliss.com/ Software Link:...
WordPress WordPress Backup & Migration Plugin <= 1.4.0 is vulnerable to Broken Access Control
Software WordPress Backup & Migration Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.4.1 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-33928 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 2b2189b8e277 Credits Abdi Pranata...
After removing and adding items from the OneDrive folder, Veeam Backup for Microsoft 365 may skip backup items
Challenge The Veeam Backup for Microsoft 365 Dev team has identified an issue where Veeam Backup for Microsoft 365 may skip items in a SharePoint Document Library or List when a large number of items are rapidly added, removed, and added again. For example, If a user adds 20 or more items to the...
Veeam Explorer for Microsoft Teams Error: "Tab type is not supported"
Challenge The Tenants of a Service Provider, who has recently upgraded to Veeam Backup for Microsoft 365 version 7.0.0.3604 P20230512, may receive the following error when attempting to restore using Veeam Explorer for Microsoft Teams: Tab type is not supported. Cause This error occurs because th...
WordPress Backup Migration 1.2.8 Plugin - Unauthenticated Database Backup Vulnerability
Exploit Title: WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup Google Dork: intitle:"Index of /wp-content/plugins/backup-backup" AND inurl:"plugins/backup-backup/" Exploit Author: Wadeek Vendor Homepage: https://backupbliss.com/ Software Link:...
WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup
Exploit Title: WordPress Plugin Backup Migration 1.2.8 - Unauthenticated Database Backup Google Dork: intitle:"Index of /wp-content/plugins/backup-backup" AND inurl:"plugins/backup-backup/" Date: 2023-05-10 Exploit Author: Wadeek Vendor Homepage: https://backupbliss.com/ Software Link:...
Notorious Cyber Gang FIN7 Returns With Cl0p Ransomware in New Wave of Attacks
The notorious cybercrime group known as FIN7 has been observed deploying Cl0p aka Clop ransomware, marking the threat actor's first ransomware campaign since late 2021. Microsoft, which detected the activity in April 2023, is tracking the financially motivated actor under its new taxonomy Sangria...
The vulnerability of the targetcli iSCSI-client’s command interface allows a hacker to gain access to confidential data.
The vulnerability of the targetcli iSCSI client’s command shell is related to the lack of access control over the /etc/target directory, the backup directory, and the backup files. Exploiting this vulnerability allows an attacker to gain access to confidential data...
The nature of cyberincidents in 2022
Kaspersky offers various services to organizations that have been targeted by cyberattackers, such as incident response, digital forensics, and malware analysis. In our annual incident response report, we share information about the attacks that we investigated during the reporting period. Data...
The vulnerability of the Windows Backup Service allows attackers to exploit it to enhance their own capabilities.
The vulnerability of the Windows Backup Service in operating systems involves errors related to privilege management. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Vulnerability fixed in Netapp SnapCenter
Netapp has fixed a vulnerability in SnapCenter. A unauthenticated malicious party could exploit the vulnerability to gain access to the backup environment with administrator privileges. This allows the malicious party to gain access to sensitive information, manipulate data or cause a...
Microsoft Windows Backup Engine Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems used for personal devices.Microsoft Windows Server is a set of server operating systems.Windows Backup Engine is one of the Windows backup engines. An elevation of privilege vulnerability exists in Microsoft Windows Backup Engine. An attacker can...
WordPress WP All Backup Plugin <= 2.4.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software WP All Backup Type Plugin Vulnerable versions = 2.4.3 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-32583 Patch priority Low CVSS severity Low 6.3 Developer Claim ownership PSID 2d09c30b2474 Credits Mika Required privilege...
Unable to Select Clustered Instance When Configuring Backup
Article Applicability This article concerns a behavior observed when using Veeam Plug-in for Microsoft SQL Server. Challenge When selecting Databases to Backup Up, the Instance drop-box does not list an option for cluster \instance; instead , there is only an option for node \instance. In some ra...
Reflected Cross-Site Scripting when restoring a backup
Description A XSS vulnerability has been identified when an administrator restores a backup from a file. When using a specially crafted file, it's possible to trigger an error that will be displayed on the web page. Since the error message contains the invalid part of the file, any JavaScript cod...
Driver Disk for Cisco fnic 2.0.0.89-243.0 - For Citrix Hypervisor 8.2 LTSR
Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Cisco's fnic driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- fnic| FC and NVME HBA Driver/| 2.0.0.89-243.0 Issues resolved in this driv...
The vulnerability of Backup Exec’s software for backup and data restoration lies in its lack of authentication procedures. This allows attackers to elevate their privileges and execute arbitrary commands.
The vulnerability of Backup Exec’s backup and recovery software is related to deficiencies in authentication procedures when using the SHA cryptographic algorithm. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...
The vulnerability of Backup Exec’s software for backup and data restoration lies in its lack of authentication procedures. This allows attackers to elevate their privileges and execute arbitrary commands.
The vulnerability of Backup Exec’s backup and recovery software is related to deficiencies in authentication procedures when using the SHA cryptographic algorithm. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...
The vulnerability of Backup Exec’s software for backup and data restoration lies in its lack of authentication procedures. This allows attackers to bypass security restrictions and execute arbitrary commands.
The vulnerability of Backup Exec’s backup and recovery software is related to deficiencies in authentication procedures when using the SHA cryptographic algorithm. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute arbitrary commands...
