Fortinet FortiNDR 信息泄露漏洞

Fortinet FortiNDR is a network detection and response solution provided by the American company Fortinet. Versions of Fortinet FortiNDR such as 7.6.0, 7.4.0 to 7.4.8, 7.2, 7.1, 7.0, as well as FortiVoice 7.0.0 to 7.0.1 have information leakage vulnerabilities. These vulnerabilities stem from the...

PT-2026-32649

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, FortiVoice 7.0.0 through 7.0.1 may allow a remote authenticated attacker with at...

Exploit for Path Traversal in Backupbliss Backup_Migration

CVE-2023-6972 Proof of Concept PoC Description This rep...

WordPress Royal WordPress Backup & Restore Plugin plugin <= 1.0.16 - Reflected Cross-Site Scripting via 'wpr_pending_template' Parameter vulnerability

Reflected Cross-Site Scripting via 'wprpendingtemplate' Parameter vulnerability discovered by Abi Wiranata in WordPress Plugin Royal WordPress Backup, Restore & Migration versions = 1.0.16...

📄 Redaxo 5.20.1 Path Traversal

Redaxo versions 5.20.1 and below suffer from a path traversal vulnerability. CVE-2026-21857: Redaxo has Path Traversal in Backup Addon Leading to Arbitrary File Read Overview | Field | Details | |---|---| | CVE ID | CVE-2026-21857 | | Severity | HIGH | | Advisory | View Advisory | | Discovered by...

How to create an External Client App to Connect Veeam Backup for Salesforce

Purpose This article documents how to create an External Client App ECA in Salesforce to integrate with Veeam Backup for Salesforce via Salesforce API. An ECA with proper permissions is required for Veeam Backup for Salesforce to integrate with Salesforce API using the OAuth 2.0 protocol. Solutio...

Linux Distros Unpatched Vulnerability : CVE-2026-34178

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instanc...

EUVD-2019-20136

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the...

CVE-2019-25706

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the...

CVE-2019-25706 Across DR-810 ROM-0 Unauthenticated File Disclosure

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the...

CVE-2019-25706

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the...

CVE-2019-25706 Across DR-810 ROM-0 Unauthenticated File Disclosure

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the...

PT-2026-32168

Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information by sending a simple GET request. Attackers can access the rom-0 endpoint without authentication to retrieve and decompress the...

Exploit for Path Traversal in Redaxo

CVE-2026-21857: Redaxo has Path Traversal in Backup Addon Lead...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: helm-diff-fips, scorecard, terraform-fips, coredns, regclient, tofu-controller-fips, gitness, buildkite-agent, kots, rancher-fleet-fips, kbld, crane-fips, mattermost-fips, kubernetes-csi-driver-nfs-fips, mesosphere-vsphere-csi, gitleaks, filebrowser, rancher-machine,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: helm-diff-fips, scorecard, terraform-fips, coredns, regclient, tofu-controller-fips, gitness, buildkite-agent, kots, rancher-fleet-fips, kbld, crane-fips, mattermost-fips, kubernetes-csi-driver-nfs-fips, mesosphere-vsphere-csi, gitleaks, filebrowser, rancher-machine,...

SUSE CVE-2026-34178

In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from backup/container/backup.yaml, a separate file in the same archive that is never checked against project restrictions. An...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization missing RequireScopes enforcement on privileged routes. An attacker can gain unauthorized access to privileged endpoints and export sensitive backup data by using a deliberately limited admin access token on rout...

GHSA-4H9Q-P5J4-XVVH Ech0: Scoped admin access tokens can bypass least-privilege controls on privileged endpoints, including backup export

Summary Ech0 scoped access tokens do not reliably enforce least privilege: multiple privileged admin routes omit scope checks, and the backup export handler strips token scope metadata entirely, allowing a low-scope admin access token to reach broader admin functionality than intended. Impact An...

Ech0: Scoped admin access tokens can bypass least-privilege controls on privileged endpoints, including backup export

Summary Ech0 scoped access tokens do not reliably enforce least privilege: multiple privileged admin routes omit scope checks, and the backup export handler strips token scope metadata entirely, allowing a low-scope admin access token to reach broader admin functionality than intended. Impact An...