(0Day) Vinchin Backup and Recovery Use of Hard-coded Credentials Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of API access keys. The issue results from the use of a hard-cod...

MainWP Child < 4.1.8 - Admin+ SQL Injection

The plugin does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed PoC POST / HTTP/1.1 Accept:...

CVE-2020-23042

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

CVE-2020-23061

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

CVE-2020-23061

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

Directory traversal

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

Cross site scripting

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

CVE-2020-23042

CVE-2020-23042 affects Dropouts Technologies LLP Super Backup v2.0.5. The vulnerability is a cross-site scripting (XSS) flaw in the path parameter of the list and download modules, enabling attackers to execute arbitrary web scripts or HTML via a crafted GET request. The issue is due to unsafely ...

CVE-2020-23061

The CVE concerns Dropouts Technologies LLP Super Backup v2.0.5, where an improper validation of the path parameter in the list and download modules enables directory traversal by modifying the path to request a local list command. The issue is triggered by a path variable that can be navigated to...

CVE-2020-23061

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

CVE-2021-42539

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

CVE-2021-42542

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

CVE-2021-42539

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

CVE-2021-42542

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

Directory traversal

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

Design/Logic Flaw

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

Ransomware: Why do backups fail when you need them most?

Its widely known, and endlessly repeated, that the last, best line of defence against the potentially devastating effects of a ransomware attack is your backups. So why do we keep hearing things like this: Were also feeling relatively confident, we have a very good backup system … and then we fin...

CVE-2021-42542 Emerson WirelessHART Gateway

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

CVE-2021-42542

CVE-2021-42542 affects Emerson WirelessHART Gateway devices, where a directory traversal flaw stems from mishandling the structure of the supplied backup folder during restore. Public sources (NVD, CVE record, and ICS advisory) assign a CVSSv3 base score of 8.0 (high) and note remote exploitation...

Dropouts Technologies Llp 跨站脚本漏洞

Dropouts Technologies Llp Super Backup is a contact backup application from Dropouts Technologies Llp, India. A cross-site scripting vulnerability exists in Dropouts Technologies LLP Super Backup version 2.0.5, which allows an attacker to execute arbitrary web script or HTML via a crafted GET...