CVE-2022-30075

CVE-2022-30075 TP-Link路由器中的认证远程代码执行 受影响设备 如果你的TP-Link路由器具有备份和恢复功能，且固件版本早于2022年6月，则很可能存在漏洞 测试环境 TP-Link Archer AX50，其他tplink路由器可能使用不同格式的备份，需要修改漏洞利用代码 PoC 使用漏洞在路由器上启动telnet守护进程 手动利用 1. 登录路由器Web界面 2. 进入高级 - 系统 - 备份设置 3. 解密并解压备份文件 如果你的路由器使用不同格式的备份文件，你可以修改漏洞利用代码（BackupParser类）或直接从GitHub使用某些工具：...

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808 is an Insecure Direct Object Reference IDOR in vulnerability found in Hitachi NAS' HNAS' System Management Unit SMU Backup & Restore functionality. This vulnerability affects SMU versions prior to 14.8.7825.01. Exploitation This exploit requires the attacker to have...

CVE-2026-19722

WPvivid — Backup, Migration & Staging is a WordPress plugin affected by a Zip Slip vulnerability prior to version 0.9.133 . During backup restoration, the plugin does not validate the destination path of files extracted from a backup package, allowing an authenticated user with high privileges (e...

Emlog 2.1.9 - SQL Injection

emlog v2.1.9 contains a SQL injection caused by unsanitized input in the data backup/restore functionality, allowing attackers to execute arbitrary SQL commands through crafted backup files. id: CVE-2023-39121 info: name: Emlog 2.1.9 - SQL Injection author: wjch611 severity: high description: |...

Apache-Solr-RCE_CVE-2023-50386_POC

Apache-Solr-RCECVE-2023-50386POC Apache Solr Backup/Restore APIs RCE Poc CVE-2023-50386 Referencias homenaje a los grandes: Blog del autor de la vulnerabilidad CVE-2023-50386 Técnicas de evasión de Java Security Manager Evasión de la protección de reflexión en JDK 17 JNI para evadir RASP Principi...

CVE-2024-44258

CVE-2024-44258: Vulnerabilità di collegamento simbolico nel framework ManagedConfiguration Sommario CVE-2024-44258 evidenzia una vulnerabilità di collegamento simbolico all'interno del framework ManagedConfiguration e del demone profiled nei dispositivi Apple. Quando si ripristina un backup...

reload.sh

reload.sh Non farlo... Per favore non farlo su sistemi live es. produzione o sul tuo computer personale dove hai memorizzato dati critici. Questa ricetta ti mostra come installare un sistema nuovo dove un altro sistema esiste ed è in esecuzione. È davvero figo e sorprendente, ma molto rischioso! ...

CVE-2023-22518

CVE-2023-22518 Exploit per Confluence CVE-2023-22518 RCE tramite backup-restore Endpoint POST /setup/setup-restore.action Richiede un login valido e diritti di amministratore o un bypass dell'autenticazione File xmlexport-20231127-071916-1.zip – backup Confluence vuoto. Ripristinarlo cancellerà...

CVE-2026-64824-PoC

CVE-2026-64824 — Traversal de Caminho via Symlink no Backup-Restore do Home Assistant Core → RCE CVSS 8.4 Crítico · GHSA-cwh8-w64c-4j5h · CWE-22 / CWE-59 TL;DR Um atacante autenticado admin envia um tar de backup malicioso. O caminho de restauração extrai o homeassistant.tar.gz interno com...

CVE-2026-55168

CVE-2026-55168 Dieses Repository enthält einen einfachen PoC für CVE-2026-55168 in Runtipi. Das Problem ist ein authentifiziertes arbiträres Dateischreiben, das über den Backup-Wiederherstellungsablauf erreicht werden kann. Ein präpariertes Backup-Archiv kann einen Symlink in wiederhergestellte...

CVE-2023-33781

CVE-2023-33781 Descrizione È stato scoperto che D-Link DIR-842V2 v1.0.3 permette a un utente di eseguire un binario arbitrario quando si connette via telnet. Questa vulnerabilità può essere attivata utilizzando la funzionalità di backup/ripristino. Prova di concetto...

CVE-2026-76549

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

EUVD-2026-66877

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

halo-2.25.4-backup-write-CVE-2026-67920

Halo CMS Backup-Restore-Schwachstelle für beliebiges Schreiben von Dateien Zusammenfassung Eine kritische Schwachstelle für beliebiges Schreiben von Dateien existiert in der Backup-Wiederherstellungsfunktion von Halo CMS bis Version 2.25.4. Die Methode restoreWorkdir in MigrationServiceImpl.java...

CVE-2026-1357

CVE-2026-1357 Laborumgebung für CVE-2026-1357 1. Umgebung aufbauen sudo apt update && sudo apt install docker.io docker-compose -y sudo systemctl start docker git clone Link of Repo wget https://downloads.wordpress.org/plugin/wpvivid-backuprestore.0.9.123.zip unzip...

CVE-2025-43537

CVE-2025-43537 Credito di Sicurezza Apple Ricercatore: Al Sadman Awal Accreditato ufficialmente da Apple Product Security per la divulgazione responsabile di CVE-2025-43537. Panoramica CVE-2025-43537 è una vulnerabilità di sicurezza identificata durante una ricerca di sicurezza indipendente e...

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

CVE-2026-32637 Velero vulnerable to file path traversal when extracting from backup's tarball

Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. Prior to 1.18.1, an attacker who compromises the backup object-storage backend can upload a malicious backup tarball containing parent-directory paths that escape the...

SparstanBoogie

SparstanBoogie’s Ursprünge wurden Berichten zufolge auf iOS/iPadOS 15.2 – 16.7 RC 20H18 und 17.0 getestet, allerdings wurden Tests bis zu 26.1 26.1 sind. Auch Tests auf Geräten oberhalb oder unterhalb der gemeldeten Versionen sind willkommen, da es auf neueren Geräten möglicherweise wieder...

CVE-2026-55168

Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live application paths during the backup restore flow. An authenticated attacker can plant user-config/app.env as a symlink to an...