CVE-2024-42455

A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The...

CVE-2024-42455

A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The...

CVE-2024-42455

CVE-2024-42455 affects Veeam Backup & Replication. The flaw enables a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection, allowing deletion of any file on the system with the service account privileges. Root c...

CVE-2024-42455

A vulnerability in Veeam Backup & Replication allows a low-privileged user to connect to remoting services and exploit insecure deserialization by sending a serialized temporary file collection. This exploit allows the attacker to delete any file on the system with service account privileges. The...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication 12.2.0.334 and previous versions 12.X. The vulnerability stems from an insufficient blacklist during deserialization, which allows for the deletion of any...

WordPress plugin Funnelforms Free 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

PT-2024-9161 · Veeam · Veeam Service Provider Console

Name of the Vulnerable Software and Affected Versions: Veeam Service Provider Console VSPC versions prior to 8.1.0.21377 Description: The issue is related to access control errors in the Veeam Service Provider Console VSPC backup and restore software for remote and cloud clients. It allows a remo...

Exploit for CVE-2024-10470

CVE-2024-10470 WPLMS Learning Management System for WordPress...

CVE-2024-11992

Absolute path traversal vulnerability in Quick.CMS, version 6.7, the exploitation of which could allow remote users to bypass the intended restrictions and download any file if it has the appropriate permissions outside of documentroot configured on the server via the aDirFiles%5B0%5D parameter i...

OpenSolution Quick CMS 安全漏洞

OpenSolution Quick CMS is a free content management system from the OpenSolution organization. A security vulnerability exists in OpenSolution Quick CMS version 6.7 that stems from improper validation of user-supplied input, absolute path traversal, and allows an attacker to delete files stored o...

The vulnerability of hybrid cloud solutions for managing thin clients in the Dell Wyse Management Suite lies in the absence of authentication procedures. This allows attackers to trigger service interruptions and delete arbitrary files.

The vulnerability of the hybrid cloud solution for managing thin clients in the Dell Wyse Management Suite is related to the absence of authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service interruptions and delete arbitrary files...

CVE-2024-6476

Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user to gain system privileges by redirecting a file deletion upon service restart. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security...

CVE-2024-6476

CVE-2024-6476 affects Axis Camera Station Pro. A non-admin user can gain system privileges by redirecting a file deletion on service restart. Root cause details are not fully provided in the available documents, but Axis has released patched versions and directs to the Axis security advisory for ...

CVE-2024-6476

Gee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is possible for a non-admin user to gain system privileges by redirecting a file deletion upon service restart. Axis has released patched versions for the highlighted flaw. Please refer to the Axis security...

CVE-2024-49596

Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...

CVE-2024-49596

Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...

CVE-2024-49596

Dell Wyse Management Suite (WMS) versions 4.4 and prior contain a Missing Authorization vulnerability. A high-privileged attacker with remote access could exploit this to cause denial of service and arbitrary file deletion. Affected component is the WMS server/auth logic (Missing Authorization is...

CVE-2024-49596

Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...

CVE-2024-49596

Dell Wyse Management Suite, version WMS 4.4 and prior, contain a Missing Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and arbitrary file deletion...

Drupal 7.x < 7.102 Multiple Vulnerabilities

According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. - Drupal core...