CVE-2025-24104

CVE-2025-24104 분석: 샌드박스 외부 파일 읽기 Apple이 나중에 CVE-2025-24104 로 추적한 버그를 신고했습니다. 원본 보고서에서는 악성 백업을 사용하여 샌드박스 제한을 우회하는 방법을 시연했습니다. 그러나 Apple의 초기 설명에서는 이 취약점이 보호된 시스템 파일을 수정할 수 있다고 명시했습니다. 기록을 바로잡고자 합니다: 이 버그는 실제로 공격자가 샌드박스 외부의 임의 파일을 읽을 수 있게 합니다. 타임라인 발견: 2024년 4월 보고: 2024년 10월 패치: iOS 18.3 베타 1 발견한 내용...

drs-malware-scan

AWSサービスを使用したオンプレミスサーバーのマルウェアスキャン分析の実行 オンプレミスでのマルウェア検出の課題...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

Среда проверки CVE для nginx-ui Этот репозиторий предназначен для проверки двух CVE, сообщённых для nginx-ui инструмент веб-GUI управления Nginx, в среде Docker. CVE-2026-42221 : Кража учётной записи администратора без аутентификации CVE-2026-42238 : Выполнение команд через восстановление резервн...

POC-CVE-2024-44258-Py

PoC Концептуальный CVE-2024-44258: Уязвимость символической ссылки в iOS Требование: Python 3.7+ • Лицензия: MIT ⚠️ Предупреждение: Этот репозиторий содержит доказательство концепции PoC, разработанное исключительно для образовательных и исследовательских целей. Это не полностью работоспособный...

CVE-2026-13336

CVE-2026-13336 is a CWE-78 (OS Command Injection) vulnerability identified by Schneider Electric (advisory SEVD-2026-223-02). The flaw allows execution of Linux operating system commands when a maliciously modified system backup is restored. The CVSS 4.0 score is 7.3 (HIGH) , with an adjacent net...

CVE-2026-13336

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

EUVD-2026-68156

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can...

CVE-2026-76549 UpdraftPlus < 1.26.7 - Backup Restoration via CSRF

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

WordPress UpdraftPlus: WP Backup & Migration Plugin plugin < 1.26.7 - Backup Restoration vulnerability

Backup Restoration vulnerability discovered by Jashid Sany in WordPress Plugin UpdraftPlus versions 1.26.7...

CVE-2026-76549

UpdraftPlus: WP Backup & Migration is a popular WordPress plugin vulnerable to a Cross-Site Request Forgery (CSRF) flaw in one of its backup management actions. In versions before 1.26.7 , a missing CSRF check allows an attacker to trick a logged-in administrator into restoring an existing backup...

GO-2026-6259 Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero

Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero...

CVE-2026-65917

CyberPanel

CVE-2026-60114

SIP 5.x (up to 5.2.16) contains a path traversal flaw in the Backup/Restore function. Unvalidated keys in the JSON backup enable attackers with restore access to craft file paths and write JSON files outside the data directory. The issue is worse when the optional passphrase is not enabled (facto...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

CVE-2026-44885 Portainer: Path traversal in backup archive extraction allows arbitrary file write

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, Portainer's backup restore feature accepts a .tar.gz archive and extracts it to a target...

Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore

Product: nginx-ui Repository: 0xJacky/nginx-ui branch: dev Vulnerability Class: Authentication Bypass → Arbitrary File Write → OS Command Injection Affected Component: POST /api/restore --- 1. Vulnerability Summary nginx-ui exposes a backup restore endpoint POST /api/restore that is completely...

External Control of File Name or Path

Overview changedetection.io is a Website change detection and monitoring service Affected versions of this package are vulnerable to External Control of File Name or Path through the backup restoration. An attacker can access arbitrary local files by supplying a crafted backup archive containing ...

ChurchCRM 安全漏洞

ChurchCRM is an open-source CRM system developed for churches. Versions of ChurchCRM prior to 7.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the lack of file extension filtering and CSRF token validation in the database backup restoration function, which could lead t...