CVE-2022-0993

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and...

Authentication flaw

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and...

CVE-2022-0993

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and...

MetaMask Asks Apple Users to Disable iCloud Backup for Wallet After User Lost $650,000

By Waqas MetaMask has warned Apple users to disable automatic iCloud backup of their wallet data. The warning results from… This is a post from HackRead.com Read the original post: MetaMask Asks Apple Users to Disable iCloud Backup for Wallet After User Lost $650,000...

PT-2022-13578 · Siteground · Siteground Security Plugin

Name of the Vulnerable Software and Affected Versions: SiteGround Security plugin for WordPress versions up to, and including, 1.2.5 Description: The issue allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation th...

Kaseya Unitrends Client/Agent 安全漏洞

Kaseya Unitrends Client/Agent is a cloud-based enterprise backup and disaster recovery technology from Kaseya Corporation, USA. A security vulnerability exists in Kaseya Unitrends Client/Agent version 10.5.5 and prior versions. An attacker can exploit this vulnerability to execute arbitrary code...

Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 1 (7.5.3-396)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 3 provides stability and usability bug fixes Vulnerability id: PSBM-139281 Optimized cache and memory usage while creating backups. Vulnerability id: PSBM-139170 The container backup process could hang when working with NFS backup storage...

Cross-Regional Disaster Recovery with Elasticsearch

Unsurprisingly, here at Rewind, we've got a lot of data to protect over 2 petabytes worth. One of the databases we use is called Elasticsearch ES or Opensearch, as it is currently known in AWS. To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is...

VulnCheck KEV: CVE-2014-8357

backupsettings.html in the web administrative portal in Zhone zNID GPON 2426A before S3.0.501 places a session key in a URL, which allows remote attackers to obtain arbitrary user passwords via the sessionKey parameter in a getConfig action to backupsettings.conf...

Build Numbers and Versions of Veeam Plug-in for Nutanix AHV

This KB article lists all versions of the Veeam Plug-in for Nutanix AHV and their respective appliance build numbers. Version | Plug-in Build | Appliance Build | Release Date | Release Notes ---|---|---|---|--- Veeam Plug-in for Nutanix AHV 10 Releases Veeam Plug-in for Nutanix AHV 10.0 Included...

WordPress WPvivid Backup and Migration plugin任意文件读取漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress WPvivid Backup and Migration plugin version 0.9.70 and previous versions contain an arbitrary file read vulnerability. An...

CVE-2022-27844

Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid WordPress plugin versions = 0.9.70...

CVE-2022-27844

CVE-2022-27844 affects the WordPress WPvivid Backup and Migration plugin (WordPress) up to version 0.9.70, with an arbitrary file read vulnerability. Public sources describe the issue across multiple feeds; OpenVAS notes vulnerability in WPvivid Migration, Backup, Staging

CVE-2022-0246

The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality. An authorized user can import preconfigured settings of the plugin by uploading a zip file. After the uploading process, files in the uploaded zip file are extracted one...

CVE-2022-0531

The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the subpage parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting...

CVE-2022-0246

The settings of the iQ Block Country WordPress plugin before 1.2.13 can be exported or imported using its backup functionality. An authorized user can import preconfigured settings of the plugin by uploading a zip file. After the uploading process, files in the uploaded zip file are extracted one...

CVE-2022-0531 WPvivid Backup and Migration Plugin < 0.9.70 - Reflected Cross-Site Scripting

The Migration, Backup, Staging WordPress plugin before 0.9.70 does not sanitise and escape the subpage parameter before outputting it back in the page, leading to a reflected Cross-Site Scripting...

Citrix Endpoint Management (aka XenMobile Server) 10.13.0 Rolling Patch 8

Package name: xms10.13.0.10817.bin For: XenMobile Server 10.13.0 Deployment type: On-premises only zReplaces: xms10.13.0.10723.bin, xms10.13.0.10603.bin, xms10.13.0.10528.bin, xms10.13.0.10426.bin, xms10.13.0.10329.bin, xms10.13.0.10212.bin, and xms10.13.0.10129.bin. Date: April 2022 Languages...

WordPress plugin Migration, Backup, Staging 路径遍历漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress WPvivid Backup and Migration plugin version 0.9.70 and previous versions contain an arbitrary file read vulnerability. An...

WordPress UpdraftPlus Backup Plugin < 1.22.9 XSS Vulnerability

The WordPress plugin Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...