WordPress plugin Keep Backup Daily 跨站脚本漏洞

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Keep Backup Daily version 2.0.2 and prior versions, which stems from insufficient...

Tape Related Task Fails With "isn't current owner. You have to change current owner"

Challenge A Tape Job or tape-related task Inventory, Catalog, or Restore fails with errors: '' isn't current owner. You have to change current owner Job has been terminated Error: '' isn't current owner. You have to change current owner Failed to inventory tape Error: '' isn't current owner...

WordPress Database Backup plugin跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site request forgery vulnerability exists in versions of WordPress Database Backup plugin prior to 2.5....

Couchbase Server 日志信息泄露漏洞

Couchbase Server is a distributed open source NoSQL non-relational database from Couchbase, Inc. that supports data query, full-text search, and active global replication, etc. A log information disclosure vulnerability exists in versions of Couchbase Server prior to 7.0.4, which stems from a...

PT-2022-14139 · WordPress · Keep Backup Daily

Name of the Vulnerable Software and Affected Versions: The Keep Backup Daily plugin for WordPress versions up to, and including, 2.0.2 Description: The issue is related to Reflected Cross-Site Scripting via the t parameter due to insufficient input sanitization and output escaping. This allows...

How to Activate Access to Microsoft Graph Teams Export APIs

Preliminary Action This article documents how to configure your app registration to access the Microsoft Graph Export API for Teams, which is necessary to enable Veeam Backup for Microsoft 365 6a and newer to protect Teams public channel posts. Once the Teams Protected APIs are accessible and Vee...

CVE-2022-30075

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation...

CVE-2022-30075

In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.5.0 is now generally available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

WordPress Database Backup for WordPress Plugin < 2.5.2 CSRF Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

TP-LINK AX50 代码注入漏洞

The TP-LINK AX50 is a router device from China P&L TP-LINK. The TP-LINK AX50 suffers from a code injection vulnerability that stems from the fact that importing a malicious backup file via the web interface may result in remote code execution due to improper authentication...

5 Linux malware families SMBs should protect themselves against

There’s no shortage of reasons why an SMB might use Linux to run their business: There are plenty of distros to choose from, it’s generally free, and perhaps above all — it’s secure. The common wisdom goes that Linux malware is rare, and for the most part this is true. Thanks to its built-in...

CVE-2022-1577

The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails t...

CVE-2022-1577

The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails t...

CVE-2022-1577

The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails t...

Cross site request forgery (csrf)

The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails t...

WordPress plugin Database Backup 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. cross-site request forgery vulnerability exists in versions of WordPress Database Backup plugin prior to 2.5....

IBM Spectrum Protect Plus Information Disclosure Vulnerability (CNVD-2022-60418)

IBM Spectrum Protect Plus is a data protection platform from IBM USA. The platform provides enterprises with a single point of control and management and supports backup and recovery for virtual, physical and cloud environments of all sizes. IBM Spectrum Protect Plus is vulnerable to an informati...

CVE-2022-1577 Database Backup for WordPress < 2.5.2 - Arbitrary Schedule Settings Update via CSRF

The Database Backup for WordPress plugin before 2.5.2 does not have CSRF check in place when updating the schedule backup settings, which could allow an attacker to make a logged in admin change them via a CSRF attack. This could lead to cases where attackers can send backup notification emails t...

CVE-2022-1577

The CVE-2022-1577 entry affects the WordPress Database Backup plugin for WordPress (pre-2.5.2). The root cause is absence of a CSRF check when updating the scheduled backup settings, enabling a logged-in admin to be coerced into changing settings via CSRF. Reported outcomes include attackers pote...