WordPress Backup Migration <= 1.3.6 - Path Traversal

WordPress Backup Migration plugin versions up to 1.3.6 contain a path traversal and file validation issue in handledownloading function, letting unauthenticated attackers download backup files containing sensitive information. id: CVE-2023-6266 info: name: WordPress Backup Migration = 1.3.6 - Pat...

cve-2025-23266-migration-bypass

cve-2025-23266-migration-bypass cve-2025-23266-migration-bypass dos métodos para obtener el contenido de la flag: 1. copiarlo desde el host al directorio montado del contenedor; 2. usar una reverse shell para obtenerlo;...

CVE-2026-42696 WordPress SiteVault – Backup, Restore, Migration & Cloning plugin <= 1.5.18 - Remote Code Execution (RCE) vulnerability

Unauthenticated Remote Code Execution RCE in SiteVault – Backup, Restore, Migration & Cloning = 1.5.19 versions...

CVE-2026-42696

The SiteVault – Backup, Restore, Migration & Cloning WordPress plugin is vulnerable to unauthenticated Remote Code Execution (RCE) in versions

EUVD-2026-96437

Unauthenticated Remote Code Execution RCE in SiteVault – Backup, Restore, Migration & Cloning = 1.5.19 versions...

killerbee

KillerBee KillerBee è un framework e strumenti per testare e auditare reti ZigBee e IEEE 802.15.4 Avviso Il supporto per usb0.x è stato deprecato/rimosso Il supporto per Apimote v1 è stato deprecato/rimosso Se hai bisogno di queste funzionalità, per favore crea un issue per spiegare il tuo caso...

CVE-2021-45232

Vulnerabilidad de acceso no autorizado en Apache APISIX Dashboard CVE-2021-45232 Consulta FOFA title="Apache APISIX Dashboard" Versiones afectadas Apache APISIX Dashboard 2.10.1 POC: IP:PORT/apisix/admin/migrate/export Recomendaciones de mitigación Actualice a la versión segura más reciente de...

WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload

WPvivid Backup & Migration plugin for WordPress = 0.9.123 contains an unauthenticated arbitrary file upload vulnerability caused by improper error handling in RSA decryption and lack of path sanitization, letting unauthenticated attackers upload arbitrary PHP files and achieve remote code executi...

domain-protect

domain-protect Domain Protect è ora un progetto OWASP spostato su: github.com/domain-protect/domain-protect...

CVE-2022-2546

All-in-One WP Migration Versiones afectadas All-in-One WP Migration 7.63 Referencias Sucuri WPSca...

GHSA-WQ92-8X3R-FM38 Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API Summary The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no...

Vikunja: Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API

Planka migration retains an unbounded aggregate of attacker-served attachments and can OOM the API Summary The always-registered Planka migration lets any ordinary user select a Planka server. Although Vikunja caps each JSON response, pagination loop, and attachment independently, it has no...

EUVD-2026-78645

Vikunja: Unbounded CSV row cardinality permits API process termination...

Vikunja: Unbounded CSV row cardinality permits API process termination

Unbounded CSV row cardinality permits API process termination Summary The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a string and then materializes a full task object for every row before insertion. Two million one-cell rows f...

GHSA-PQF9-H8G4-8GMH Vikunja: Unbounded CSV row cardinality permits API process termination

Unbounded CSV row cardinality permits API process termination Summary The authenticated v2 CSV migration route caps upload bytes but not parsed row cardinality. It reads every record into a string and then materializes a full task object for every row before insertion. Two million one-cell rows f...

CVE-2025-5961

CVE-2025-5961 Migration, Backup, Staging – WPvivid Backup & Migration 1: lo: mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo validlft forever preferredlft forever inet6 ::1/128 scope host validlft...

pqc-cost-of-delay

Cost of Delay for Post-Quantum Migration Live explorer · reference implementation, proofs, case studies and statistics for a research paper. Classical hacking risk and harvest-now-decrypt-later HNDL quantum risk, expressed in one unit — US dollars of loss per year of delay — so a single ordered...

CVE-2026-106097

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network tho...

burp2caido

About Burp2Caido is a tool that allows you to migrate exported Burpsuite HTTP history files into Caido. It was originaly developed by Monke. !WARNING This tool inserts HTTP data directly into the Caido project. Running it multiple times WILL add the requests again each time. Run it once!...

CVE-2026-106097 Code Snippets < 3.10.0 - Admin+ SQLi in Migration Importers Leading to Network-Wide Credential Disclosure (Multisite)

The Code Snippets WordPress plugin before 3.10.0 does not sanitise and escape a user-supplied parameter before using it in a SQL query in some of its snippet-migration import endpoints, which are accessible to any user holding site-administration capabilities; on a WordPress Multisite network tho...