EUVD-2020-23533

Malware in sbrugna...

EUVD-2014-8440

Malware in sbrugna...

EUVD-2014-8441

Malware in sbrugna...

EUVD-2014-8443

Malware in sbrugna...

EUVD-2014-8442

Malware in sbrugna...

EUVD-2014-2377

Malware in sbrugna...

EUVD-2015-4361

Malware in sbrugna...

EUVD-2020-5678

Malware in sbrugna...

EUVD-2022-15583

Malicious code in bioql PyPI...

EUVD-2024-47632

Malicious code in bioql PyPI...

CVE-2024-6559

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

CVE-2020-13424

The XCloner component before 3.5.4 for Joomla! allows Authenticated Local File Disclosure...

CVE-2020-35948

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xclonerrestore.php writefileaction could...

CVE-2020-35950

An issue was discovered in the XCloner Backup and Restore plugin before 4.2.153 for WordPress. It allows CSRF via almost any endpoint...

CVE-2024-6559

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

CVE-2024-6559 XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

CVE-2024-6559

CVE-2024-6559 refers to XCloner Backup, Restore and Migrate for WordPress. The vulnerability is a Full Path Disclosure in all versions up to 4.7.3 caused by sabre access not being restricted, enabling unauthenticated retrieval of the web app’s full path. The exposed path can aid subsequent attack...

CVE-2024-6559 XCloner <= 4.7.3 - Unauthenticated Full Path Disclosure

The Backup, Restore and Migrate WordPress Sites With the XCloner Plugin plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 4.7.3. This is due the plugin utilizing sabre without preventing direct access to the files. This makes it possible for...

WordPress XCloner plugin <= 4.7.3 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin XCloner versions = 4.7.3...

PT-2024-37716 · WordPress · Xcloner Plugin

Name of the Vulnerable Software and Affected Versions: XCloner Plugin versions up to, and including, 4.7.3 Description: The XCloner Plugin for WordPress is vulnerable to Full Path Disclosure due to its utilization of sabre without preventing direct access to the files. This allows unauthenticated...