65 matches found
CVE-2024-37315
Nextcloud Server is a self hosted personal cloud system. An attacker with read-only access to a file is able to restore older versions of a document when the filesversions app is enabled. It is recommended that the Nextcloud Server is upgraded to 26.0.12, 27.1.7 or 28.0.3 and that the Nextcloud...
CVE-2022-40314
A remote code execution risk when restoring backup files originating from Moodle 1.9 was identified...
CVE-2022-40314
CVE-2022-40314 describes a remote code execution risk when restoring backup files originating from Moodle 1.9. The vulnerability is reported with a high/critical impact (CVSS: 9.8, NETWORK attack vector, no user interaction) and is supported by multiple connected sources (NVD entry and Nessus/Ope...
U.S. Dept Of Defense: CVE-2020-3187 - Unauthenticated Arbitrary File Deletion
A vulnerability in the web services interface of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to conduct directory traversal attacks and obtain read and delete access to sensitive files on a targeted...
PT-2022-5130 · Moodle +2 · Moodle +2
Name of the Vulnerable Software and Affected Versions: Moodle versions 1.9 Description: A remote code execution risk exists when restoring backup files. The issue is related to insecure input validation during the restoration process. Exploitation of this issue may allow a remote attacker to...
CVE-2020-6023
Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to escalate privileges while restoring files in Anti-Ransomware...
CVE-2020-6022
Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware...
CVE-2020-6022
Check Point ZoneAlarm before version 15.8.139.18543 allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware...
How to Free Recover Deleted Files on Your Mac
There are many scenarios where you would want to recover deleted data from your Mac. These deleted files could be your important photos, official documents, financial records, etc. Loss of such data can cause you unnecessary emotional and financial harm. However, you can make use of data recovery...
CVE-2019-16896
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...
Design/Logic Flaw
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...
CVE-2019-16896
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...
PT-2019-14852
Name of the Vulnerable Software and Affected Versions K7 Ultimate Security version 16.0.0117 Description The issue arises from the improper validation of administrative privileges by the K7BKCExt.dll module, also known as the backup module, in K7 Ultimate Security. This allows for an arbitrary fi...
CVE-2019-16896: Improper Link Resolution Before File Access
In K7 Ultimate Security 16.0.0117, the module K7BKCExt.dll aka the backup module improperly validates the administrative privileges of the user, allowing an arbitrary file write via a symbolic link attack with file restoration functionality...
CB TAU Threat Intelligence Notification: Nemty Ransomware
While Nemty Ransomware is distributed by various exploit kits, its behavior is similar to other variants of ransomware. It will perform “task kill” on processes to ensure the encryption of files such as databases SQL server, perform the deletion of volume shadow copies, and disable Windows...
PT-2019-12374
Name of the Vulnerable Software and Affected Versions Code42 Enterprise and Crashplan for Small Business versions through 6.9.1 Description An issue exists where an attacker can craft a restore request to restore a file through the Code42 app to a location they do not have privileges to write...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
Design/Logic Flaw
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2017-18384
cPanel before 68.0.15 allows jailed accounts to restore files that are outside of the jail SEC-310...
CVE-2017-18384
CVE-2017-18384 affects cPanel prior to version 68.0.15, where jailed accounts can restore files that lie outside of their jail confinement (SEC-310). The connected Red Hat and CVE records reiterate the same description without additional technical specifics on root cause or affected components be...