Lucene search
+L

558 matches found

Kitploit
Kitploit
added 2026/09/03 7:03 a.m.2 views

CVE-2025-43537

CVE-2025-43537 Apple 安全致谢 研究人员: Al Sadman Awal 已获得 Apple 产品安全团队对 CVE-2025-43537 负责任披露的正式致谢。 概述 CVE-2025-43537 是一项在独立安全研究中发现并负责任地向 Apple 披露的安全漏洞。 Apple 调查了该报告,实施了安全修复,分配了 CVE-2025-43537,并在其官方安全公告中公开致谢该贡献。 本仓库记录了与该漏洞相关的公开披露、厂商致谢和公告信息。 漏洞信息 字段| 值 ---|--- CVE ID| CVE-2025-43537 厂商| Apple 研究人员| Al...

5.5CVSS5.8AI score0.00475EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 5:25 a.m.4 views

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 参考(向dalao们致敬): CVE-2023-50386漏洞作者博客 Java Security Manager绕过姿势 JDK 17下的反射保护绕过 JNI绕Rasp 漏洞利用原理和思考:https://mp.weixin.qq.com/s/mO4e8aiuL56yBdOD4jy2qQ poc是用Pocsuite3写的,直接用框架运行即可,若不使用框架,则提取其核心实现出来也可以...

8.8CVSS7.2AI score0.83719EPSS
SaveExploits4References2
Kitploit
Kitploit
added 2026/09/03 3:04 a.m.6 views

CVE-2024-44258

CVE-2024-44258: Vulnerabilidad de symlink en el framework ManagedConfiguration Resumen CVE-2024-44258 destaca una vulnerabilidad de symlink dentro del framework ManagedConfiguration y el daemon profiled en dispositivos Apple. Al restaurar un backup manipulado, el proceso de migración no valida si...

7.1CVSS5.8AI score0.00751EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/03 1:22 a.m.4 views

reload.sh

reload.sh No lo hagas... Por favor, no lo ejecutes en sistemas en vivo ej. producción ni en tu computadora personal donde almacenas datos críticos. Esta receta te muestra cómo instalar un sistema limpio donde otro sistema ya existe y está funcionando. ¡Es realmente genial y asombroso, pero muy...

5.9AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/03 12:49 a.m.6 views

CVE-2026-1357

CVE-2026-1357 Entorno de laboratorio para CVE-2026-1357 1. Construir el entorno sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

9.8CVSS7.4AI score0.32714EPSS
SaveExploits14
Kitploit
Kitploit
added 2026/09/02 8:58 p.m.6 views

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup Restore Arbitrary File Write Vulnerability Summary A critical arbitrary file write vulnerability exists in the backup restoration functionality of Halo CMS versions up to 2.25.4. The restoreWorkdir method in MigrationServiceImpl.java copies the workdir/ directory from a...

8.8CVSS5.9AI score0.0065EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 5:13 p.m.3 views

CVE-2023-33781

CVE-2023-33781 Descripción Se descubrió que D-Link DIR-842V2 v1.0.3 permite a un usuario ejecutar un binario arbitrario al conectarse a telnet. Esta vulnerabilidad se puede activar mediante la funcionalidad de copia de seguridad/restauración. Prueba de concepto...

8.8CVSS7.2AI score0.32032EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/02 3:58 p.m.2 views

CVE-2022-30075

CVE-2022-30075 Ejecución remota de código autenticada en routers Tp-Link Dispositivos afectados Si tu router Tp-Link tiene funcionalidad de copia de seguridad y restauración y el firmware es anterior a junio de 2022, probablemente sea vulnerable. Probado con Tp-Link Archer AX50, otros routers...

8.8CVSS7.2AI score0.33832EPSS
SaveExploits8References2
Nuclei
Nuclei
added 2026/09/02 7:49 a.m.25 views

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

7.2CVSS7.3AI score0.02513EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/02 6:35 a.m.4 views

SparstanBoogie

SparstanBoogie se probó, según se informa, en iOS/iPadOS 15.2 - 16.7 RC 20H18 y 17.0; sin embargo, las pruebas se han realizado hasta 26.1 26.1. También se agradece cualquier prueba en dispositivos por encima o por debajo de lo informado, ya que podría volver a aparecer en dispositivos más nuevos...

5.8AI score
SaveExploits0
Kitploit
Kitploit
added 2026/09/02 5:01 a.m.5 views

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808 es una vulnerabilidad de Referencia Directa a Objetos Insegura IDOR encontrada en la funcionalidad de Backup & Restore de la Unidad de Gestión del Sistema SMU de Hitachi NAS HNAS. Esta vulnerabilidad afecta a las versiones de SMU anteriores a 14.8.7825.01. Explotación...

7.6CVSS6.7AI score0.00544EPSS
SaveExploits5
EUVD
EUVD
added 2026/09/01 1:27 p.m.6 views

EUVD-2026-69132

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

7.3CVSS5.9AI score0.00617EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/31 6:32 a.m.4 views

CVE-2026-55168

CVE-2026-55168 Este repositorio contiene un PoC simple para CVE-2026-55168 en Runtipi. El problema es una escritura arbitraria de archivos autenticada que se puede alcanzar a través del flujo de restauración de copias de seguridad. Un archivo de copia de seguridad manipulado puede colocar un enla...

6.5CVSS5.9AI score0.00528EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/31 4:12 a.m.4 views

CVE-2026-64824-PoC

CVE-2026-64824 — Path traversal por enlace simbólico en la copia de seguridad y restauración de Home Assistant Core → RCE CVSS 8.4 Crítico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Un atacante autenticado admin sube un tar de copia de seguridad manipulado. La ruta de restauración extrae el...

9.3CVSS5.9AI score0.00797EPSS
SaveExploits1
NVD
NVD
added 2026/08/30 7:17 a.m.14 views

CVE-2026-19722

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can...

0.00172EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/30 6:00 a.m.28 views

CVE-2026-19722

WPvivid — Backup, Migration & Staging is a WordPress plugin affected by a Zip Slip vulnerability prior to version 0.9.133 . During backup restoration, the plugin does not validate the destination path of files extracted from a backup package, allowing an authenticated user with high privileges (e...

6AI score0.00172EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/29 1:07 p.m.5 views

CVE-2023-22518

CVE-2023-22518 Exploit per Confluence CVE-2023-22518 RCE tramite backup-restore Endpoint POST /setup/setup-restore.action Richiede un login valido e diritti di amministratore o un bypass dell'autenticazione File xmlexport-20231127-071916-1.zip – backup Confluence vuoto. Ripristinarlo cancellerà...

10CVSS9AI score0.99999EPSS
SaveExploits49References1
NVD
NVD
added 2026/08/27 6:17 a.m.11 views

CVE-2026-76549

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

5.9CVSS0.00097EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/27 6:00 a.m.5 views

EUVD-2026-66877

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

5.9CVSS5.4AI score0.00097EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/25 9:15 p.m.4 views

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

5.9CVSS5.5AI score
SaveExploits0References6
Rows per page
Query Builder