3610 matches found
reload.sh
reload.sh Non farlo... Per favore non farlo su sistemi live es. produzione o sul tuo computer personale dove hai memorizzato dati critici. Questa ricetta ti mostra come installare un sistema nuovo dove un altro sistema esiste ed è in esecuzione. È davvero figo e sorprendente, ma molto rischioso! ...
Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...
EUVD-2026-65463
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to SQL Injection via archive restore functionality in all versions up to, and including, 7.109 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...
CVE-2026-19949
The All-in-One WP Migration and Backup WordPress plugin (all versions up to and including 7.109 ) is susceptible to a second-order SQL injection in its archive restore functionality, caused by insufficient escaping of a user-supplied parameter and inadequate preparation of the existing SQL query....
Emlog 2.1.9 - SQL Injection
emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...
Gorse < 0.5.10 - Unauthenticated Database Dump
Gorse 0.5.10 contains an authentication bypass caused by empty adminapikey in /api/dump and /api/restore endpoints, letting unauthenticated remote attackers access and modify protected data, exploit requires default empty adminapikey configuration. id: CVE-2026-56782 info: name: Gorse 0.5.10 -...
CVE-2026-25243-debugfree
CVE-2026-25243 — DEBUG-free Redis RCE निजी jemalloc Redis पर एक विशेष रूप से तैयार RESTORE से विश्वसनीय रिमोट कोड निष्पादन remote code execution — कोईDEBUG कमांड नहीं, कोई /proc नहीं, कोई gdb नहीं, कोई ROP नहीं, ASLR चालू। यह हमलावर का कमांड redis प्रक्रिया के रूप में चलाता है डिफ़ॉल्ट इमेज में...
CVE-2026-55168
CVE-2026-55168 Este repositório contém um PoC simples para CVE-2026-55168 no Runtipi. O problema é uma escrita arbitrária de ficheiro autenticada que pode ser alcançada através do fluxo de restauro de backup. Um arquivo de backup malicioso pode plantar um symlink nos dados restaurados da aplicaçã...
CVE-2023-33781
CVE-2023-33781 Descrizione È stato scoperto che D-Link DIR-842V2 v1.0.3 permette a un utente di eseguire un binario arbitrario quando si connette via telnet. Questa vulnerabilità può essere attivata utilizzando la funzionalità di backup/ripristino. Prova di concetto...
CVE-2023-5808
CVE-2023-5808 CVE-2023-5808 एक असुरक्षित प्रत्यक्ष वस्तु संदर्भ IDOR भेद्यता है जो हिताची NAS HNAS के सिस्टम प्रबंधन इकाई SMU बैकअप और पुनर्स्थापना कार्यक्षमता में पाई गई है। यह भेद्यता SMU के 14.8.7825.01 से पहले के संस्करणों को प्रभावित करती है। शोषण इस शोषण के लिए हमलावर को ऐसे उपयोगकर्ता खाते...
colabcat
Colabcat Run Hashcat on Google Colab with session restore capabilities with Google Drive. Usage Go to the link below to open a copy of the colabcat.ipynb file in Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Click on Runtime, Change runtime...
CVE-2026-63639
A flaw was found in Valkey, a distributed key-value database. A remote attacker could exploit a use-after-free vulnerability in the RESTORE command. This occurs when a malformed data stream is processed during stream deserialization, causing a shared resource to be improperly managed. If...
CVE-2026-74611
A flaw was found in the Linux kernel's Transport Layer Security TLS 1.3 implementation. When processing TLS 1.3 records with optimistic zero-copy enabled, the tlsdecryptsg function fails to properly restore the message iterator during a retry. A remote attacker, by sending a specially crafted TLS...
CVE-2026-68766
A flaw was found in hashcat. This vulnerability allows an attacker to inject malicious command-line options when parsing restore files. By crafting a specially designed restore file, an attacker can append arbitrary content to files, potentially leading to arbitrary code execution on the system...
BIT-VALKEY-2026-63639 Valkey: UAF in stream deserialization may lead to remote code execution
Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...
SparstanBoogie
SparstanBoogie’s Ursprünge wurden Berichten zufolge auf iOS/iPadOS 15.2 – 16.7 RC 20H18 und 17.0 getestet, allerdings wurden Tests bis zu 26.1 26.1 sind. Auch Tests auf Geräten oberhalb oder unterhalb der gemeldeten Versionen sind willkommen, da es auf neueren Geräten möglicherweise wieder...
CVE-2026-64824-PoC
CVE-2026-64824 — Home Assistant Core Backup-Restore: Symlink Path Traversal → RCE CVSS 8.4 Critico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 In breve Un attaccante autenticato admin carica un tar di backup appositamente modificato. Il percorso di ripristino estrae il homeassistant.tar.gz interno co...
MSSQL-Analysis-Coerce
MSSQL Analysis Services - Autenticazione forzata Una tecnica per forzare un SQL Server Windows ad autenticarsi su una macchina arbitraria. Questa proof of concept è co-scritta da: Podalirius: Worty: Prova di concetto Per innescare l'autenticazione come account della macchina locale, dobbiamo...
CVE-2026-68766
hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and --potfile-path. Attackers can craft restore files with malicious options to append attacker-controlled content to arbitrary files, enabling code...