halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup-Restore-Schwachstelle für beliebiges Schreiben von Dateien Zusammenfassung Eine kritische Schwachstelle für beliebiges Schreiben von Dateien existiert in der Backup-Wiederherstellungsfunktion von Halo CMS bis Version 2.25.4. Die Methode restoreWorkdir in MigrationServiceImpl.java...

CVE-2026-25243-debugfree

CVE-2026-25243 — DEBUG-freie Redis-RCE privat Zuverlässige Remote-Codeausführung durch ein einzelnes präpariertes RESTORE auf jemalloc Redis — keinDEBUG-Befehl, kein /proc, kein gdb, kein ROP, ASLR aktiv. Führt den Befehl des Angreifers als Redis-Prozess aus Root in Standard-Images. 🔒 Privates...

CVE-2026-1357

CVE-2026-1357 Laborumgebung für CVE-2026-1357 1. Umgebung aufbauen sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

CVE-2026-52886

Path Traversal: elusione del controllo del prefisso startswith Notepad++ — Lettura arbitraria di file tramite traversal dibackupFilePath in session.xml Advisory GHSA: GHSA-rqfm-pw34-r7j6 CVE: CVE-2026-52886 Gravità: Moderata Versioni interessate: v8.9.6.4 Versione corretta: v8.9.7 Commit della...

CVE-2020-14883

http://myq-x.remore:8090/index.php?m=WebServiceMgmt::invoke&p="d":"\\m\":"Wsf\\\\Win\\\\Firewall::delete\","\\p\":"----\\\"|ipconfig+/allC:\\\\Windows\\\\system32\\\\spool\\\\drivers\\\\1.txt||----","\\id\":"1","\\pwd\":"","s":"b75c29ef4a5a3d600d96732b3c5cbed1"...

cve-2025-66398

CVE-2025-66398 — Signal K Server RCE PoC 📜 विवरण CVE-2025-66398 Signal K Server में एक समस्या है, जहाँ एक अप्रमाणित हमलावर /skServer/validateBackup के माध्यम से सर्वर के रिस्टोर स्टेट को दूषित कर सकता है, फिर /skServer/restore के माध्यम से कॉन्फ़िगरेशन हाईजैक करके एक बैकडोर एडमिन खाता इंजेक्ट कर...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: Iniezione di Comandi OS nei Router TP-Link Per maggiori informazioni, vedere https://vulners.com/cve/CVE-2026-3227 Una vulnerabilità persistente e autenticata di iniezione di comandi OS nel firmware dei router TP-Link che può causare il bricking del dispositivo o una potenziale...

CVE-2017-0261

Analyse de CVE-2017-0261 et des échantillons d'exploitation 0x01 Description de la vulnérabilité Cause : Lors de l'ouverture d'un document Office, FLTLDR.EXE est utilisé pour afficher le fichier EPS intégré contenant la vulnérabilité. Ce fichier est écrit en langage PostScript et peut être exploi...

CVE-2023-22518

CVE-2023-22518 Exploit per Confluence CVE-2023-22518 RCE tramite backup-restore Endpoint POST /setup/setup-restore.action Richiede un login valido e diritti di amministratore o un bypass dell'autenticazione File xmlexport-20231127-071916-1.zip – backup Confluence vuoto. Ripristinarlo cancellerà...

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808 ist eine Insecure Direct Object Reference IDOR-Schwachstelle in der Backup & Restore-Funktionalität der System Management Unit SMU von Hitachi NAS HNAS. Diese Schwachstelle betrifft SMU-Versionen vor 14.8.7825.01. Ausnutzung Dieser Exploit erfordert, dass der Angreifer...

Blackash-CVE-2025-12762

🔐 CVE-2025-12762 — Vulnerabilità RCE Critica in pgAdmin 4 🚨 Qual è il Problema? Una vulnerabilità di Esecuzione Remota di Codice RCE esiste in pgAdmin 4 versioni ≤ 9.9. Gli aggressori possono eseguire comandi arbitrari sull'host quando pgAdmin è in esecuzione in modalità server e processa un dump...

colabcat

Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...

veeam-velociraptor

Artefatti Velociraptor per Veeam Backup & Replication - PoC Questo repository contiene una collezione di artefatti Velociraptor che fungono da prova di concetto per una pipeline forense remota di Veeam Backup & Replication: artifacts/ contiene le definizioni degli artefatti tools/ contiene un...

CVE-2025-43537

CVE-2025-43537 Credito di Sicurezza Apple Ricercatore: Al Sadman Awal Accreditato ufficialmente da Apple Product Security per la divulgazione responsabile di CVE-2025-43537. Panoramica CVE-2025-43537 è una vulnerabilità di sicurezza identificata durante una ricerca di sicurezza indipendente e...

CVE-2023-22518

CVE-2023-22518 Exploit Descrizione Questo repository contiene uno script di exploit per CVE-2023-22518. Lo script consente il caricamento di file non autorizzato, che potrebbe portare all'esecuzione di codice remoto o ad altre vulnerabilità di sicurezza. Disclaimer Questo repository è solo a scop...

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

WordPress All-in-One WP Migration and Backup plugin <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability

Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution vulnerability discovered by Jack Taylor in WordPress Plugin All-in-One WP Migration versions = 7.109...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

CVE-2026-19949

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

CVE-2026-19949 All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution

The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...