17074 matches found
CVE-2018-4878-
-cms 서버 클러스터 CMS 일괄 식별, 백업 일괄 탐색, 일괄 인젝션. VIP 그룹판 백업...
CVE-2024-40711
CVE-2024-40711 Veeam Backup & Replication 사전 인증 역직렬화 취약점 CVE-2024-40711 익스플로잇 기술적 세부사항은 블로그 게시물을 참조하세요 https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC 실행 화면 CVE-2024-40711.exe -f binaryformatter -g Veeam -c http://192.168.201.1:8000/trigger --targetveeam...
CVE-2017-14105
Aerohive HiveManager Classic 권한 상승 취약점 이름 Aerohive HiveManager Classic 권한 상승 취약점 영향받는 시스템 HiveManager Classic 8.0r1 8.1r1 심각도 Medium 6.6/10 영향 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:H/RC:C 공급업체 http://www.aerohive.com/ 권고 http://www.ush.it/team/ush/hack-aerohive/aerohive-priv-exec.txt 저자...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
CVE-2026-103680
A heap-based buffer overflow exists in the tnef component within the find_free_number() function. The vulnerability occurs during the generation of numbered backup suffixes for duplicate filenames when numbered backups are enabled and file overwriting is disabled. An attacker can trigger this by ...
CVE-2026-103680 Tnef: heap buffer overflow in find_free_number() via numbered-backup suffix generation
A flaw was found in tnef. A heap-based buffer overflow can occur in the findfreenumber function when generating numbered backup suffixes for duplicate filenames. When numbered backups are enabled and file overwriting is disabled, an attacker can supply a specially crafted Transport Neutral...
WordPress BackupSheep WordPress Backup Plugin plugin <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration vulnerability
Unauthenticated Arbitrary File Deletion and Backup Exfiltration vulnerability discovered by Enrico Marcolini, Claudio Marchesini, Dottor Marc in WordPress Plugin BackupSheep WordPress Backup Plugin versions = 1.8...
WordPress_Backup_Migration-RCE_Unauthenticated
CVE-2023-6553 — WordPress용 Backup Migration 플러그인 - 리버스 셸 Chocapikk의 CVE-2023-6553 익스플로잇 확장 버전으로, 기존의 대화형 웹셸 위에 단일 명령 리버스 셸 모드를 추가했습니다. 취약점 CVE-2023-6553 — Backup Migration WordPress 플러그인버전 ≤ 1.3.7의 인증되지 않은 원격 코드 실행 취약점. 이 플러그인은 backup-heart.php를 노출하며, Content-Dir HTTP 헤더에서 PHP 필터 체인을 읽어 인증 또는 검증 ...
CVE-2025-43537
CVE-2025-43537 Признание Apple в области безопасности Исследователь: Al Sadman Awal Официально признан Apple Product Security за ответственное раскрытие информации об уязвимости CVE-2025-43537. Обзор CVE-2025-43537 — это уязвимость безопасности, выявленная в ходе независимого исследования...
everest-backup-cve-2025-11380
CVE-2025-11380 Код доказательства концепции для CVE-2025-11380 - неаутентифицированный доступ к резервным копиям в плагине Everest Backup для WordPress. Ссылка на пост в блоге скоро появится...
CVE-2026-101148 BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
CVE-2026-101148 BackupSheep <= 1.8 - Unauthenticated Arbitrary File Deletion and Backup Exfiltration via Empty Integration Key
The BackupSheep WordPress Backup Plugin WordPress plugin through 1.8 does not properly validate its integration key, treating an unset or blank key as valid, which allows unauthenticated attackers to create and download full site backups, including the database with user password hashes, and to...
Rocky Linux 8.6 [CIQ] Security Update: mariadb / mariadb-backup / mariadb-backup-debuginfo / etc (ciqsa-2026_0963)
The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260963 advisory. This advisory aggregates security fixes for the mariadb SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-24805. Tenable has extracted the preceding description...
Rocky Linux 10.2 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (crlsa-2026_21380)
The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202621380 advisory. firefox: Incorrect boundary conditions in the JavaScript Engine: JIT component CVE-2026-8388 firefox: Other issue in the JavaScript Engine component...
CVE-2026-102130
Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the application loaded it. An authenticated administrator could potentially use this to execute arbitrary code on the gateway as the underlying service...
CVE-2026-102130 Kiteworks Email Protection Gateway Remote Code Execution
Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the application loaded it. An authenticated administrator could potentially use this to execute arbitrary code on the gateway as the underlying service...
CVE-2026-102130
The Kiteworks Email Protection Gateway is vulnerable to Remote Code Execution (RCE) due to insufficient validation of uploaded backup content. An authenticated administrator can influence how the application loads these backups to execute arbitrary code on the gateway as the underlying service ac...
CVE-2026-102130 Kiteworks Email Protection Gateway Remote Code Execution
Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the application loaded it. An authenticated administrator could potentially use this to execute arbitrary code on the gateway as the underlying service...