reload.sh

reload.sh Не делайте этого... Пожалуйста, не делайте этого на живых системах например, production или на вашем личном компьютере , где вы храните важные данные. Этот рецепт показывает, как установить свежую систему, когда другая система уже существует и работает. Это действительно круто и...

CVE-2022-30075

CVE-2022-30075 Аутентифицированное удаленное выполнение кода в маршрутизаторах Tp-Link Затронутые устройства Если ваш маршрутизатор Tp-Link имеет функцию резервного копирования и восстановления, а прошивка старше июня 2022 года, он, вероятно, уязвим. Протестировано на Tp-Link Archer AX50, другие...

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808은 Hitachi NAS HNAS의 System Management Unit SMU Backup & Restore 기능에서 발견된 안전하지 않은 직접 객체 참조 IDOR 취약점입니다. 이 취약점은 14.8.7825.01 이전의 SMU 버전에 영향을 미칩니다. 악용 이 악용에는 공격자가 Read-Only 또는 Global Administrator가 아닌 사용자 계정의 자격 증명을 통제할 수 있어야 합니다. 즉: Storage Administrator Server Administra...

CVE-2026-19722

WPvivid — Backup, Migration & Staging is a WordPress plugin affected by a Zip Slip vulnerability prior to version 0.9.133 . During backup restoration, the plugin does not validate the destination path of files extracted from a backup package, allowing an authenticated user with high privileges (e...

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 Ссылки с уважением к dalao: Блог автора уязвимости CVE-2023-50386 Методы обхода Java Security Manager Обход защиты рефлексии в JDK 17 JNI обход RASP Принцип эксплуатации и размышления:...

CVE-2024-44258

CVE-2024-44258: Vulnerabilità di collegamento simbolico nel framework ManagedConfiguration Sommario CVE-2024-44258 evidenzia una vulnerabilità di collegamento simbolico all'interno del framework ManagedConfiguration e del demone profiled nei dispositivi Apple. Quando si ripristina un backup...

CVE-2023-22518

CVE-2023-22518 Exploit per Confluence CVE-2023-22518 RCE tramite backup-restore Endpoint POST /setup/setup-restore.action Richiede un login valido e diritti di amministratore o un bypass dell'autenticazione File xmlexport-20231127-071916-1.zip – backup Confluence vuoto. Ripristinarlo cancellerà...

CVE-2026-64824-PoC

CVE-2026-64824 — Traversal de Caminho via Symlink no Backup-Restore do Home Assistant Core → RCE CVSS 8.4 Crítico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Um atacante autenticado admin envia um tar de backup malicioso. O caminho de restauração extrai o homeassistant.tar.gz interno com...

CVE-2026-55168

CVE-2026-55168 Dieses Repository enthält einen einfachen PoC für CVE-2026-55168 in Runtipi. Das Problem ist ein authentifiziertes arbiträres Dateischreiben, das über den Backup-Wiederherstellungsablauf erreicht werden kann. Ein präpariertes Backup-Archiv kann einen Symlink in wiederhergestellte...

CVE-2023-33781

CVE-2023-33781 Descrizione È stato scoperto che D-Link DIR-842V2 v1.0.3 permette a un utente di eseguire un binario arbitrario quando si connette via telnet. Questa vulnerabilità può essere attivata utilizzando la funzionalità di backup/ripristino. Prova di concetto...

CVE-2026-76549

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

EUVD-2026-66877

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup-Restore-Schwachstelle für beliebiges Schreiben von Dateien Zusammenfassung Eine kritische Schwachstelle für beliebiges Schreiben von Dateien existiert in der Backup-Wiederherstellungsfunktion von Halo CMS bis Version 2.25.4. Die Methode restoreWorkdir in MigrationServiceImpl.java...

CVE-2026-1357

CVE-2026-1357 Laborumgebung für CVE-2026-1357 1. Umgebung aufbauen sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

CVE-2025-43537

CVE-2025-43537 Credito di Sicurezza Apple Ricercatore: Al Sadman Awal Accreditato ufficialmente da Apple Product Security per la divulgazione responsabile di CVE-2025-43537. Panoramica CVE-2025-43537 è una vulnerabilità di sicurezza identificata durante una ricerca di sicurezza indipendente e...

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

SparstanBoogie

SparstanBoogie’s Ursprünge wurden Berichten zufolge auf iOS/iPadOS 15.2 – 16.7 RC 20H18 und 17.0 getestet, allerdings wurden Tests bis zu 26.1 26.1 sind. Auch Tests auf Geräten oberhalb oder unterhalb der gemeldeten Versionen sind willkommen, da es auf neueren Geräten möglicherweise wieder...

CVE-2026-55168

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...