15234 matches found
CVE-2021-42539
The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...
CVE-2021-42542
The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...
Emerson WirelessHART Gateway 访问控制错误漏洞
The Emerson WirelessHART Gateway is a wireless gateway from Emerson USA. An access control error vulnerability exists in Emerson WirelessHART Gateway that stems from a lack of privilege validation on system backup recovery. An attacker could use this vulnerability to take over an account and chan...
Semrush: php info file and sql backup at vendor's subdomain
Researcher found open /phpinfo.php and sql backup from mvp app at vendor's subdomain. There was no sensitive data...
CMSimple_XH 1.7.4 - Remote Code Execution (Authenticated) Exploit
Exploit Title: CMSimpleXH 1.7.4 - Remote Code Execution RCE Authenticated Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.cmsimple-xh.org/ Software Link: https://www.cmsimple-xh.org/?Downloads Version: 1.7.4 Category: Webapps Tested on: Linux/Windows CMSimpleXH is an open sour...
CMSimple_XH 1.7.4 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: CMSimpleXH 1.7.4 - Remote Code Execution RCE Authenticated Date: 01-10-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.cmsimple-xh.org/ Software Link: https://www.cmsimple-xh.org/?Downloads Version: 1.7.4 Category: Webapps Tested on: Linux/Windows CMSimpleX...
CMSimple_XH 1.7.4 Remote Command Execution
Exploit Title: CMSimpleXH 1.7.4 - Remote Code Execution RCE Authenticated Date: 01-10-2021 Exploit Author: Halit AKAYDIN hLtAkydn Vendor Homepage: https://www.cmsimple-xh.org/ Software Link: https://www.cmsimple-xh.org/?Downloads Version: 1.7.4 Category: Webapps Tested on: Linux/Windows CMSimpleX...
Default credentials
ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...
CVE-2021-41302
ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...
Release Information for Veeam Backup for AWS v4
Requirements Please confirm that you are running version Veeam Backup for AWS v3 build 3.0.0.319 or later before upgrading. You can find the currently installed build number Server Version in the About section under Configuration | Support Information. After installing Veeam Backup for AWS v4, yo...
Release Information for Veeam Backup for Microsoft Azure v3
Requirements Please confirm that you are running version Veeam Backup for Microsoft Azure v2 build 2.0.0.303 or later before upgrading. You can find the currently installed build number Server Version in the About section under Configuration | Support Information. After installing, your build...
Driver Disk for Qlogic qla2xxx 10.02.06.02-k - For Citrix Hypervisor 8.2 LTSR
Who Should Install this Driver Disk? Customers on non-Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the driver. Note: If you use Dell hardware, do not install this driver disk. This version of the driver disk is...
Dell EMC NetWorker Information Disclosure Vulnerability (CNVD-2022-42743)
Dell EMC NetWorker is a set of unified backup and recovery software from Dell DELL of the United States. The software provides backup and recovery, deduplication, backup reporting, and other features.Dell NetWorker is vulnerable to information disclosure. An attacker could use the vulnerability t...
CVE-2021-36364
Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...
CVE-2021-36364
Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...
Deserialization of untrusted data
Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...
CVE-2021-36364
Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...
CVE-2021-36364
Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...
CVE-2021-36364
CVE-2021-36364 affects Nagios XI prior to 5.8.5, due to backup_xi.sh wildcard handling that permits improper input processing. The entry (NVD Red Hat, etc.) notes high/critical impact (CVSS2 7.5, CVSS3.1 9.8) with network access and no authentication. A fix is available in Nagios XI 5.8.5 and lat...
FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Config Download (Unauthenticated)
Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Config Download Unauthenticated Date: 25.07.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.fatpipeinc.com FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Unauthenticated Config Download Vendor: FatPipe Networks Inc. Product web page...