CVE-2026-1357

CVE-2026-1357 Lab Environment for CVE-2026-1357 1. Build the environment sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 References respect to the masters: CVE-2023-50386 vulnerability author's blog Java Security Manager Bypass Techniques Bypassing Reflection Protection in JDK 17 JNI Bypassing RASP Vulnerability exploitation...

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup Restore Arbitrary File Write Vulnerability Summary A critical arbitrary file write vulnerability exists in the backup restoration functionality of Halo CMS versions up to 2.25.4. The restoreWorkdir method in MigrationServiceImpl.java copies the workdir/ directory from a...

CVE-2023-33781

CVE-2023-33781 Descripción Se descubrió que D-Link DIR-842V2 v1.0.3 permite a un usuario ejecutar un binario arbitrario al conectarse a telnet. Esta vulnerabilidad se puede activar mediante la funcionalidad de copia de seguridad/restauración. Prueba de concepto...

CVE-2024-44258

CVE-2024-44258: Vulnerabilità di collegamento simbolico nel framework ManagedConfiguration Sommario CVE-2024-44258 evidenzia una vulnerabilità di collegamento simbolico all'interno del framework ManagedConfiguration e del demone profiled nei dispositivi Apple. Quando si ripristina un backup...

CVE-2023-22518

CVE-2023-22518 Exploit per Confluence CVE-2023-22518 RCE tramite backup-restore Endpoint POST /setup/setup-restore.action Richiede un login valido e diritti di amministratore o un bypass dell'autenticazione File xmlexport-20231127-071916-1.zip – backup Confluence vuoto. Ripristinarlo cancellerà...

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808 ist eine Insecure Direct Object Reference IDOR-Schwachstelle in der Backup & Restore-Funktionalität der System Management Unit SMU von Hitachi NAS HNAS. Diese Schwachstelle betrifft SMU-Versionen vor 14.8.7825.01. Ausnutzung Dieser Exploit erfordert, dass der Angreifer...

reload.sh

reload.sh Non farlo... Per favore non farlo su sistemi live es. produzione o sul tuo computer personale dove hai memorizzato dati critici. Questa ricetta ti mostra come installare un sistema nuovo dove un altro sistema esiste ed è in esecuzione. È davvero figo e sorprendente, ma molto rischioso! ...

CVE-2022-30075

CVE-2022-30075 Execução Remota de Código Autenticada em Roteadores Tp-Link Dispositivos Afetados Se o seu roteador Tp-Link possui funcionalidade de backup e restauração e o firmware é anterior a junho de 2022, ele provavelmente está vulnerável Testado Com Tp-Link Archer AX50, outros roteadores...

CVE-2025-43537

CVE-2025-43537 Credito di Sicurezza Apple Ricercatore: Al Sadman Awal Accreditato ufficialmente da Apple Product Security per la divulgazione responsabile di CVE-2025-43537. Panoramica CVE-2025-43537 è una vulnerabilità di sicurezza identificata durante una ricerca di sicurezza indipendente e...

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

CVE-2026-55168

CVE-2026-55168 Este repositório contém um PoC simples para CVE-2026-55168 no Runtipi. O problema é uma escrita arbitrária de ficheiro autenticada que pode ser alcançada através do fluxo de restauro de backup. Um arquivo de backup malicioso pode plantar um symlink nos dados restaurados da aplicaçã...

SparstanBoogie

SparstanBoogie’s Ursprünge wurden Berichten zufolge auf iOS/iPadOS 15.2 – 16.7 RC 20H18 und 17.0 getestet, allerdings wurden Tests bis zu 26.1 26.1 sind. Auch Tests auf Geräten oberhalb oder unterhalb der gemeldeten Versionen sind willkommen, da es auf neueren Geräten möglicherweise wieder...

CVE-2026-64824-PoC

CVE-2026-64824 — Home Assistant Core Backup-Restore: Symlink Path Traversal → RCE CVSS 8.4 Critico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 In breve Un attaccante autenticato admin carica un tar di backup appositamente modificato. Il percorso di ripristino estrae il homeassistant.tar.gz interno co...

CVE-2026-55168

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...

EUVD-2026-64143

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...

CVE-2026-55168 Runtipi: Authenticated arbitrary file write via backup restore symlink planting

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...

CVE-2026-55168 Runtipi: Authenticated arbitrary file write via backup restore symlink planting

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...

CVE-2026-55168

Runtipi (personal homeserver orchestrator) versions 4.10.0 and earlier are vulnerable to an authenticated arbitrary file write via symlink planting during the backup restore flow. An attacker with valid credentials can craft a backup archive containing a symlink (e.g., user-config/app.env pointin...

NocoBase backup restore schema name allows command injection

Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...