Weather app security breach

Weather app is a weather forecasting app. A security vulnerability exists in Weather app version 1.0.0. An attacker exploited the vulnerability to cause backup files to be exposed to unauthorized control...

PT-2024-21080 · Jurecapuder · Androidweatherapp

Name of the Vulnerable Software and Affected Versions: jurecapuder AndroidWeatherApp version 1.0.0 Description: A problematic vulnerability was found in the AndroidWeatherApp, affecting an unknown function of the file androidmanifest.xml of the component Backup File Handler. This leads to exposur...

CVE-2024-2567: Exposure of Backup File to an Unauthorized Control Sphere

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as problematic, was found in jurecapuder AndroidWeatherApp 1.0.0 on Android. Affected is an unknown function of the file androidmanifest.xml of the component Backup File Handler. The manipulation leads to exposure of backup file to a...

CVE-2024-2294: Improper Limitation of a Pathname to a Restricted Directory

The Backuply – Backup, Restore, Migrate and Clone plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.2.7 via the backupname parameter in the backuplydownloadbackup function. This makes it possible for attackers to have an account with only...

WordPress Plugin Backuply Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

Vinchin Backup and Recovery Security Vulnerabilities

Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery 7.2 and earlier versions, which stems from vulnerabilit...

Vinchin Backup And Recovery 7.2 Command Injection

CVE ID: CVE-2024-25228 Title: Authenticated Command Injection Vulnerability in ManoeuvreHandler.class.php of Vinchin Backup & Recovery Versions 7.2 and Earlier Description: A critical security vulnerability has been discovered in the getVerifydiyResult function within the ManoeuvreHandler.class.p...

CVE-2024-25228: Improper Neutralization of Special Elements used in a Command

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

CVE-2024-25228

Vinchin Backup and Recovery version 7.2 and earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in the ManoeuvreHandler.class.php file (also referenced in SystemHandler.class.php ). The root cause is insufficient input validation and sanitization...

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

CVE-2024-25228

Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution RCE via the getVerifydiyResult function in ManoeuvreHandler.class.php...

Dell EMC NetWorker Registration Information Disclosure

The vulnerability of the Dell EMC NetWorker backup and data recovery system lies in the insufficient protection of registration data. Exploiting these vulnerabilities could allow attackers to obtain user registration data...

CVE-2024-1383

The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 0.9.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

CVE-2024-1383

CVE-2024-1383 affects the WPvivid Backup for MainWP WordPress plugin. It is a Reflected XSS via the id parameter in all versions up to 0.9.32 due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject scripts when a user is tricked into clicking a lin...

CVE-2024-1383: Improper Neutralization of Input During Web Page Generation

The WPvivid Backup for MainWP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 0.9.32 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

PT-2024-2557 · Vinchin · Vinchin Backup & Recovery

Name of the Vulnerable Software and Affected Versions: Vinchin Backup and Recovery versions 7.2 and earlier Description: The issue is related to the getVerifydiyResult function, which is vulnerable to Authenticated Remote Code Execution RCE. This vulnerability can be exploited by a remote attacke...

Improper access control in backup and restore features

...

Hitachi NAS (HNAS) System Management Unit (SMU) Backup & Restore < 14.8.7825.01 IDOR Exploit

!/usr/bin/python3 Title: Hitachi NAS HNAS System Management Unit SMU Backup & Restore IDOR Vulnerability CVE: CVE-2023-5808 Date: 2023-12-13 Exploit Author: Arslan Masood @arszilla Vendor: https://www.hitachivantara.com/ Version: --id --sso " Create --host argument: parser.addargument "--host",...