drs-malware-scan

Eseguire l'analisi della scansione malware dei server on-prem utilizzando i servizi AWS Sfide con il rilevamento malware on-premises Può essere difficile per i team di sicurezza monitorare continuamente tutti i server on-premises a causa di vincoli di budget e risorse. L'antivirus basato su firme...

CVE-2025-24104

CVE-2025-24104 Analisi: Lettura di file al di fuori della sandbox Ho segnalato un bug che Apple ha successivamente tracciato come CVE-2025-24104. Nel mio rapporto originale, ho dimostrato come un backup malevolo potesse essere utilizzato per eludere le restrizioni della sandbox. Tuttavia, la...

POC-CVE-2024-44258-Py

PoC Concettuale CVE-2024-44258: Vulnerabilità Symlink in iOS Requisito: Python 3.7+ • Licenza: MIT ⚠️ Avvertenza: Questo repository contiene una prova di concetto PoC sviluppata a scopo esclusivamente educativo e di ricerca. Non è un exploit completamente funzionante. Il suo utilizzo su dispositiv...

CVE-2026-76549 UpdraftPlus < 1.26.7 - Backup Restoration via CSRF

The UpdraftPlus: WP Backup & Migration Plugin WordPress plugin before 1.26.7 does not have CSRF checks in one of its backup management actions, which could allow attackers to make a logged in admin restore an existing backup, reverting the site's database and files to an earlier state, via a...

CVE-2026-76549

UpdraftPlus: WP Backup & Migration is a popular WordPress plugin vulnerable to a Cross-Site Request Forgery (CSRF) flaw in one of its backup management actions. In versions before 1.26.7 , a missing CSRF check allows an attacker to trick a logged-in administrator into restoring an existing backup...

WordPress UpdraftPlus: WP Backup & Migration Plugin plugin < 1.26.7 - Backup Restoration vulnerability

Backup Restoration vulnerability discovered by Jashid Sany in WordPress Plugin UpdraftPlus versions 1.26.7...

nginx-ui-CVE-2026-42221-CVE-2026-42238-

nginx-ui CVE 验证环境 nginx-ui（Nginx 的 Web GUI 管理工具）报告的两个 CVE 在 Docker 环境中进行实际验证的仓库。 CVE-2026-42221 ：未认证情况下的管理员账户劫持 CVE-2026-42238 ：未认证备份恢复导致的命令执行 免责声明 本仓库的验证内容仅针对自己管理的隔离本地环境。 未经许可对第三方系统使用类似手法将违反不正访问禁止法。 详细文章 验证过程、考察及学习内容已总结在 Qiita 文章中。 实际尝试 nginx-ui 的 CVE：「漏洞」认为是设计问题 漏洞概要...

GO-2026-6259 Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero

Velero vulnerable to file path traversal when extracting from backup's tarball in github.com/vmware-tanzu/velero...

CVE-2026-65917

CyberPanel

CVE-2026-60114

SIP 5.x (up to 5.2.16) contains a path traversal flaw in the Backup/Restore function. Unvalidated keys in the JSON backup enable attackers with restore access to craft file paths and write JSON files outside the data directory. The issue is worse when the optional passphrase is not enabled (facto...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via a crafted symlink in the templates directory during image import or instance backup restoration processes. An attacker can access and modify arbitrary files on the host system, potentially leadi...

CVE-2026-44885 Portainer: Path traversal in backup archive extraction allows arbitrary file write

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. From 2.33.0 to before 2.33.8, Portainer's backup restore feature accepts a .tar.gz archive and extracts it to a target...

Nginx-UI is Vulnerable to Unauthenticated Remote Code Execution via Backup Restore

Product: nginx-ui Repository: 0xJacky/nginx-ui branch: dev Vulnerability Class: Authentication Bypass → Arbitrary File Write → OS Command Injection Affected Component: POST /api/restore --- 1. Vulnerability Summary nginx-ui exposes a backup restore endpoint POST /api/restore that is completely...

External Control of File Name or Path

Overview changedetection.io is a Website change detection and monitoring service Affected versions of this package are vulnerable to External Control of File Name or Path through the backup restoration. An attacker can access arbitrary local files by supplying a crafted backup archive containing ...

ChurchCRM 安全漏洞

ChurchCRM is an open-source CRM system developed for churches. Versions of ChurchCRM prior to 7.2.0 contained security vulnerabilities. These vulnerabilities stemmed from the lack of file extension filtering and CSRF token validation in the database backup restoration function, which could lead t...

Weblate: Remote code execution during backup restoration

Impact The project backup didn't filter Git and Mercurial configuration files and this could lead to remote code execution under certain circumstances. Patches https://github.com/WeblateOrg/weblate/pull/18549 Workarounds The project backup is only accessible to users who can create projects...

GHSA-558G-H753-6M33 Weblate: Remote code execution during backup restoration

Impact The project backup didn't filter Git and Mercurial configuration files and this could lead to remote code execution under certain circumstances. Patches https://github.com/WeblateOrg/weblate/pull/18549 Workarounds The project backup is only accessible to users who can create projects...

Arbitrary File Upload

Overview weblate is an A web-based continuous localization system with tight version control integration Affected versions of this package are vulnerable to Arbitrary File Upload in the backup restoration, due to insufficient filtering of configuration files. An attacker with access to create...