CVE-2021-24155

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE...

CVE-2021-24155

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE...

CVE-2021-24155

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE...

CVE-2021-24174

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups...

Format string

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE...

CVE-2021-24155

The CVE-2021-24155 vulnerability affects WordPress Backup Guard plugin prior to 1.6.0. The authenticated arbitrary file upload flaw does not validate that imported files are in the SGBP format/extension, enabling high-privilege (admin+) users to upload arbitrary files, including PHP, and potentia...

CVE-2021-24155 Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload

The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users admin+ to upload arbitrary files, including PHP ones, leading to RCE...

WordPress 代码问题漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A code issue vulnerability exists in the WordPress plugin Backup and Migrate Plugin Backup Guard...

ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Vulnerability

Exploit Title: ZBL EPON ONU Broadband Router 1.0 - Remote Privilege Escalation Exploit Author: LiquidWorm Vendor Homepage: http://www.zblchina.com http://www.wd-thailand.com Vendor: Zhejiang BC&TV Technology Co., Ltd. ZBL | W&D Corporation WAD TECHNOLOGY THAILAND Product web page:...

CVE-2021-25924

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

CVE-2021-25924

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

Cross site request forgery (csrf)

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

CVE-2021-25924

In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the /go/api/config/backup endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the...

ZBL EPON ONU Broadband Router 1.0 Remote Privilege Escalation

ZBL EPON ONU Broadband Router 1.0 Remote Privilege Escalation Exploit Vendor: Zhejiang BC&TV Technology Co., Ltd. ZBL | W&D Corporation WAD TECHNOLOGY THAILAND Product web page: http://www.zblchina.com | http://www.wd-thailand.com Affected version: Firmwre: V100R001 Software model: HG104B-ZG-E /...

Aravind SV gocd 跨站请求伪造漏洞

Aravind SV gocd is an application of Aravind SV open source. the main repository of GoCD - Continuous Delivery Server. A cross-site request forgery vulnerability exists in GoCD, versions 19.6.0 to 21.1.0, which stems from a lack of CSRF protection in the /go/api/config/backup endpoint...

Virtuozzo Hybrid Infrastructure 4.5 Update 1 (4.5.1-23)

This update provides a new feature, as well as bug fixes and improvements. Vulnerability id: VSTOR-41271 Forcing an update may fail after the first attempt due to the already updated certificate management layout. Vulnerability id: VSTOR-41577 Fixed IQN validation. Vulnerability id: VSTOR-41403 T...

Veeam Backup for Microsoft 365 5b cumulative patch KB4135

This patch is superseded by Veeam Backup for Microsoft 365 5b cumulative patch KB4158 Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.1.179 or 5.0.1.207 prior to installing this cumulative patch KB4135. You can check this under Help and Support About in Veeam...

(0Day) Lepide Active Directory Self Service Backup Missing Authentication Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Lepide Active Directory Self Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of backup functionality. The issue results fro...

Percona XtraBackup 安全漏洞

Percona XtraBackup is an open source hot backup utility for MySQL databases from Percona, USA. A security vulnerability exists in Percona XtraBackup, no information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor's announcement...

Monthly License Usage report is not generated when using Veeam Backup Enterprise Manager in the Veeam Cloud Connect infrastructure

This issue is fixed in thePatch 2 Challenge Monthly Licensing Report generation fails with "ReportingJob task error: System.ArgumentException: An item with the same key has already been added. " error if there is Veeam Backup Enterprise Manager in the Veeam Cloud Connect infrastructure. Solution ...