Lucene search
+L

26 matches found

Cvelist
Cvelist
added 2022/08/01 12:48 p.m.31 views

CVE-2022-1585 Project Source Code Download <= 1.0.0 - Unauthenticated Backup Download

The Project Source Code Download WordPress plugin through 1.0.0 does not protect its backup generation and download functionalities, which may allow any visitors on the site to download the entire site, including sensitive files like wp-config.php...

7.8AI score0.01072EPSS
SaveExploits1References1
zdt
zdt
added 2022/08/01 12:00 a.m.471 views

WordPress Duplicator 1.4.6 Plugin - Unauthenticated Backup Download Vulnerability

Exploit Title: WordPress Plugin Duplicator 1.4.6 - Unauthenticated Backup Download Exploit Author: SecuriTrust Vendor Homepage: https://snapcreek.com/ Software Link: https://wordpress.org/plugins/duplicator/ Version: 1.4.7 Tested on: Linux, Windows CVE : CVE-2022-2551 Reference:...

7.5CVSS0.5AI score0.16673EPSS
SaveExploits5
OSV
OSV
added 2021/04/29 3:15 p.m.4 views

CVE-2020-21997

Smartwares HOME easy =1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control...

7.5CVSS5.7AI score0.02717EPSS
SaveExploits2References3
wpexploit
wpexploit
added 2020/12/14 12:00 a.m.84 views

Total Upkeep by BoldGrid < 1.14.10 - Unauthenticated Backup Download

The plugin does not restrict access to a file containing sensitive information, such as the internal path of backups, which may then allow unauthenticated users to download them. The filepath in /wp-content/plugins/boldgrid-backup/cron/restore-info.json will reveal the internal path of the backup...

0.8AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2012/09/20 12:00 a.m.48 views

Thomson Wireless VoIP Cable Modem Authentication Bypass

Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other Vulnerabilities: Unauthenticated Backup File Access, Plaintext Protocol...

0.5AI score
SaveExploits0
zdt
zdt
added 2012/09/20 12:00 a.m.34 views

Thomson Wireless VoIP Cable Modem Auth Bypass

Exploit for hardware platform in category web applications Exploit Title: Thomson Wireless VoIP Cable Modem Auth Bypass Date: February 22, 2011 Authors: Glafkos Charalambous, George Nicolaou Product: TWG850-4 Wireless VoIP Cable Modem Software Version: ST9A.01.06 Severity: High Other...

7.1AI score
SaveExploits0
Rows per page
Query Builder