drs-malware-scan

使用 AWS 服务对本地服务器进行恶意软件扫描分析 本地服务器恶意软件检测面临的挑战 受预算和资源限制，安全团队难以持续监控所有本地服务器。仅靠基于特征的防病毒软件是不够的，因为现代恶意软件使用了各种混淆技术。服务器管理员过去可能无法全面了解所有服务器上的安全事件。在事件响应期间，如果没有集中监控和告警，确定受损系统和可安全恢复的备份就变得极具挑战性。服务器管理员为高级威胁检测而设置和维护额外的安全工具也是一项繁重的工作。快速的平均检测和修复感染时间至关重要，但如果没有合适的自动化解决方案，就难以实现。...

CVE-2025-24104

CVE-2025-24104 写文：沙箱外读取文件 我报告了一个后来被 Apple 追踪为 CVE-2025-24104 的漏洞。在我最初的报告中，我演示了如何利用恶意备份绕过沙箱限制。然而，Apple 最初的描述指出该漏洞可能导致受保护系统文件被修改。我想澄清一下：这个漏洞实际上允许攻击者读取沙箱外的任意文件。 时间线 发现时间： 2024年4月 报告时间： 2024年10月 修复版本： iOS 18.3 beta 1 我的发现 当我深入研究这个问题时，我发现该漏洞源于备份恢复过程中缺乏正确的符号链接验证。具体来说，如果你构造一个备份，其中文件...

POC-CVE-2024-44258-Py

PoC Conceptual CVE-2024-44258: Vulnerabilidad de Symlink en iOS Requisito: Python 3.7+ • Licencia: MIT ⚠️ Advertencia: Este repositorio contiene una prueba de concepto PoC desarrollada con fines exclusivamente educativos y de investigación. No es un exploit completamente funcional. Su uso en...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

Entorno de verificación de CVE de nginx-ui Este repositorio es para verificar realmente dos CVEs reportados para nginx-ui herramienta de administración GUI web de Nginx en un entorno Docker. CVE-2026-42221 : Secuestro de cuenta de administrador sin autenticación CVE-2026-42238 : Ejecución de...

CVE-2026-81804

ZHBackup – Backup, Restore & Migration WordPress plugin versions up to and including 2.4.2 are affected by an unauthenticated Sensitive Data Exposure vulnerability. The flaw allows an attacker to retrieve sensitive data over the network without any prior authentication or user interaction. The CV...

CVE-2026-13336

CVE-2026-13336 is a CWE-78 (OS Command Injection) vulnerability identified by Schneider Electric (advisory SEVD-2026-223-02). The flaw allows execution of Linux operating system commands when a maliciously modified system backup is restored. The CVSS 4.0 score is 7.3 (HIGH) , with an adjacent net...

CVE-2026-13336

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

CVE-2026-13336: Improper Neutralization of Special Elements used in an OS Command

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause execution of Linux Operating system commands when a system back up is restored that has been maliciously modified...

EUVD-2026-68156

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can...

PT-2026-83524

Name of the Vulnerable Software and Affected Versions WPvivid — Backup, Migration & Staging versions prior to 0.9.133 Description The backup restoration process fails to properly validate the destination paths of files extracted from a backup package. This creates a Zip Slip condition, which is a...

CVE-2026-19722: Improper Limitation of a Pathname to a Restricted Directory

The WPvivid — Backup, Migration & Staging WordPress plugin before 0.9.133 does not validate the destination of files extracted from a backup package during restoration, allowing high privilege users such as administrators to write arbitrary files outside the intended restore directory, which can...

CVE-2026-76549 UpdraftPlus < 1.26.7 - Backup Restoration via CSRF

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

CVE-2026-76549 UpdraftPlus < 1.26.7 - Backup Restoration via CSRF

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

WordPress UpdraftPlus: WP Backup & Migration Plugin plugin < 1.26.7 - Backup Restoration vulnerability

Backup Restoration vulnerability discovered by Jashid Sany in WordPress Plugin UpdraftPlus versions 1.26.7...

CVE-2026-76549

The UpdraftPlus: WP Backup & Migration Plugin for WordPress (versions before 1.26.7 ) is vulnerable to a Cross-Site Request Forgery (CSRF) . The flaw exists because the plugin lacks proper CSRF checks in one of its backup management actions. An attacker could trick a logged-in administrator into ...

PT-2026-82418

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

GO-2026-6259 Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero

Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero...

CVE-2026-73661: External Control of System or Configuration Setting

FreePBX is an open source IP PBX. Prior to 16.0.47 and 17.0.30, the FreePBX Framework module permits a crafted backup to restore the hidden AUTHTYPE setting with the value none through runRestore in ampconf/htdocs/admin/libraries/Builtin/Restore.php. An authenticated user with sufficient...

CVE-2026-65917

CyberPanel

CVE-2026-65917 CyberPanel IncBackups IDOR via Sequential Backup ID

CyberPanel through 1.9.1, fixed in commit b198460, contains an insecure direct object reference IDOR vulnerability in the IncBackups application's incremental-backup handlers deleteBackup, fetchRestorePoints, and restorePoint that allows authenticated panel users to access or manipulate other...