Lucene search
+L

31 matches found

Kitploit
Kitploit
•added 2026/10/08 3:15 p.m.•18 views

CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migrate pour WordPress = 2.3.3 - Téléchargement arbitraire de fichiers non authentifié Description Le plugin Super Backup & Clone - Migrate for WordPress pour WordPress est vulnérable au téléchargement arbitraire de fichiers en raison de l'absence de validatio...

9.8CVSS8.4AI score0.03526EPSS
SaveExploits2
Kitploit
Kitploit
•added 2026/10/08 2:14 p.m.•14 views

CVE-2024-9290

Инструмент эксплуатации CVE-2024-9290 | Уязвимость Super Backup & Clone Инструмент нацелен на веб-сайты WordPress, использующие плагин Super Backup & Clone и уязвимые к произвольной загрузке файлов. Он пытается загрузить вредоносную оболочку в каталог /wp-content/uploads/isnapshots/. После загруз...

9.8CVSS8.5AI score0.03526EPSS
SaveExploits2References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2020-15798

Malware in sbrugna...

6.1CVSS6.3AI score0.0074EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•20 views

EUVD-2020-15816

Malware in sbrugna...

7.5CVSS7.3AI score0.01697EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/22 4:30 p.m.•14 views

CVE-2020-23042

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

6.1CVSS6.1AI score0.0074EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:19 p.m.•16 views

CVE-2020-23061

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

7.5CVSS7.2AI score0.01697EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2025/01/13 12:00 a.m.•26 views

The vulnerability of the `ibk_restore_migrate_check()` function in the Super Backup & Clone plugin (WP SuperBackup) of the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the ibkrestoremigratecheck function in the Super Backup & Clone plugin for WordPress’ content management system is related to the lack of restrictions on the download of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

10CVSS8.1AI score0.03526EPSS
SaveExploits2References4Affected Software1
GithubExploit
GithubExploit
•added 2024/12/24 12:04 a.m.•747 views

Exploit for CVE-2024-9290

CVE-2024-9290 Exploit Tool | Super Backup & Clone Vulnerabilit...

9.8CVSS9.7AI score0.03526EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2024/12/13 10:49 a.m.•176 views

Exploit for CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migra...

9.8CVSS9.6AI score0.03526EPSS
SaveExploits2
NVD
NVD
•added 2024/12/13 10:15 a.m.•37 views

CVE-2024-9290

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to, and including, 2.3.3. This makes it possible for...

9.8CVSS0.03526EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2024/12/13 9:27 a.m.•46 views

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to, and including, 2.3.3. This makes it possible for...

9.8CVSS0.03526EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2024/12/13 9:27 a.m.•13 views

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress <= 2.3.3 - Unauthenticated Arbitrary File Upload

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to, and including, 2.3.3. This makes it possible for...

9.8CVSS9.8AI score0.03526EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/13 12:00 a.m.•3 views

CVE-2024-9290: Unrestricted Upload of File with Dangerous Type

The Super Backup & Clone - Migrate for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation and a missing capability check on the ibkrestoremigratecheck function in all versions up to, and including, 2.3.3. This makes it possible for...

9.8CVSS6.3AI score0.03526EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2024/12/13 12:00 a.m.•22 views

WordPress plugin Super Backup & Clone 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

9.8CVSS8.6AI score0.03526EPSS
SaveExploits2References2
OSV
OSV
•added 2021/10/22 8:15 p.m.•19 views

CVE-2020-23061

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

7.5CVSS5.8AI score0.01697EPSS
SaveExploits1References1
OSV
OSV
•added 2021/10/22 8:15 p.m.•15 views

CVE-2020-23042

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

6.1CVSS5.9AI score0.0074EPSS
SaveExploits1References1
NVD
NVD
•added 2021/10/22 8:15 p.m.•25 views

CVE-2020-23061

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

7.5CVSS0.01697EPSS
SaveExploits1References1
Prion
Prion
•added 2021/10/22 8:15 p.m.•25 views

Cross site scripting

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting XSS vulnerability in the path parameter of the list and download module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request...

4.3CVSS6AI score0.0074EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2021/10/22 8:15 p.m.•24 views

Directory traversal

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

5CVSS7.5AI score0.01697EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2021/10/22 7:20 p.m.•51 views

CVE-2020-23042

CVE-2020-23042 affects Dropouts Technologies LLP Super Backup v2.0.5. The vulnerability is a cross-site scripting (XSS) flaw in the path parameter of the list and download modules, enabling attackers to execute arbitrary web scripts or HTML via a crafted GET request. The issue is due to unsafely ...

6.1CVSS6AI score0.0074EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder