PT-2026-24958

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.12 through 6.6 Description An improper sanitization of the compression algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD server via API cal...

CVE-2019-25407

Comodo Dome Firewall 2.7.0 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted input to the backup schedule interface. Attackers can send POST requests to the backupschedule endpoint with JavaScript code in the BACKUPRCPT...

CVE-2021-4468

PLANEX CS-QP50F-ING2 smart cameras expose a configuration backup interface over HTTP that does not require authentication. A remote, unauthenticated attacker can directly retrieve a compressed configuration backup file from the device. The backup contains sensitive configuration information,...

PLANEX CS-QP50F-ING2 安全漏洞

The Planex PLANEX CS-QP50F-ING2 is a smart camera from Planex Japan. A security vulnerability exists in the PLANEX CS-QP50F-ING2 that stems from the configuration of a backup interface without authentication, which could lead to the disclosure of sensitive information and compromise the...

EUVD-2017-9525

Malware in sbrugna...

CVE-2017-18409

In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...

CVE-2017-18409

In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...

CVE-2017-18409

In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...

Input validation

In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...

CVE-2017-18409

In this CVE, the affected software is cPanel prior to 67.9999.103. The backup interface could return a backup archive containing all MySQL databases (SEC-283), indicating an information disclosure vulnerability in the backup generation process. The available sources do not specify the exact root ...

CVE-2017-18409

In cPanel before 67.9999.103, the backup interface could return a backup archive with all MySQL databases SEC-283...

PT-2013-4893 · Openstack · Openstack Cinder

Name of the Vulnerable Software and Affected Versions: OpenStack Cinder versions 2013.1.3 and earlier Description: The issue affects the backup API api/contrib/backups.py and volume transfer API contrib/volume transfer.py in OpenStack Cinder, allowing remote attackers to cause a denial of service...