CVE-2025-27566

Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerability is exploited, a remote...

WordPress CYAN Backup plugin < 2.5.3 - Admin+ Stored XSS via General Settings vulnerability

Admin+ Stored XSS via General Settings vulnerability discovered by Bob Matyas in WordPress Plugin CYAN Backup versions 2.5.3...

WordPress Backup Database plugin <= 4.9 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Backup Database versions = 4.9...

Portworx Backup 安全漏洞

Portworx Backup is a Kubernetes backup solution from Portworx that allows you to backup and restore applications and their data across multiple clusters. A security vulnerability exists in Portworx Backup that stems from the possibility of logging sensitive information under certain conditions...

PT-2025-22083 · Px Backup · Px Backup

Name of the Vulnerable Software and Affected Versions: PX Backup affected versions not specified Description: A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions. Recommendations: At the moment, there is no information about a newer version th...

CVE-2025-1308: Improper Encoding or Escaping of Output

A vulnerability exists in PX Backup whereby sensitive information may be logged under specific conditions...

How to register Veeam Data Cloud Vault in Veeam Backup for Microsoft Azure

Article Applicability This article is specifically for Veeam Backup for Microsoft Azure v8. With the release ofVeeam Backup for Microsoft Azure v8.1, the process for adding Veeam Data Cloud Vault as a repository has been fully integrated. Purpose This article documents the procedure for registeri...

CVE-2025-27566: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability exists in a-blog cms versions prior to Ver. 3.1.43 and versions prior to Ver. 3.0.47. This is an issue with insufficient path validation in the backup feature, and exploitation requires the administrator privilege. If this vulnerability is exploited, a remote...

appleple a-blog cms 路径遍历漏洞

appleple a-blog cms is a content management system from appleple. A path traversal vulnerability exists in appleple a-blog cms versions prior to 3.1.43, which stems from insufficient path validation of the backup function, and could lead to a path traversal attack...

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

Exploit for Link Following in Apple Ipados

PoC Conceptual CVE-2024-44258: Vulnerabilidad de Symlink en iO...

CVE-2024-9662

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-9663

The CYAN Backup WordPress plugin before 2.5.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-8702

The Backup Database WordPress plugin through 4.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

CVE-2025-4679

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...

CVE-2025-4679

Synology Active Backup for Microsoft 365 (Synology Active Backup for Microsoft 365) is affected by CVE-2025-4679. The issue enables remote authenticated attackers to obtain sensitive information via unspecified vectors, with a high confidentiality impact (C:HIGH, I:N, A:N) and a CVSS 3.1 base sco...

CVE-2024-57273

Netgate pfSense CE prior to 2.8.0 beta release and corresponding Plus builds is vulnerable to Cross-site scripting XSS in the Automatic Configuration Backup ACB service, allowing remote attackers to execute arbitrary JavaScript, delete backups, or leak sensitive information via an unsanitized...

Citrix NetScaler Automated backup job is failing after recent upgrade.

After upgrading to NetScaler firmware 13.1.56.x or later , attempts to download backup files using the Nitro API may fail. Customers using automation tools such as Ansible , Postman , or custom scripts may receive the following error when downloading files through the systemfile endpoint: Main...