CVE-2020-36873

The CVE-2020-36873 entry affects Astak CM-818T3 2.4GHz wireless security cameras. A vulnerability exists in the /web/cgi-bin/hi3510/backup.cgi endpoint that allows remote, unauthenticated download of a compressed configuration backup, potentially exposing administrative credentials and other sens...

CVE-2020-36873 Astak CM-818T3 Unauthenticated Configuration Disclosure

Astak CM-818T3 2.4GHz wireless security surveillance cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorizatio...

CVE-2020-36874

ACE SECURITY WIP-90113 HD cameras are affected by an unauthenticated configuration-disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint allows remote download of a compressed configuration backup without authentication, risking exposure of administrative credentia...

CVE-2020-36874 ACE SECURITY WIP-90113 Unauthenticated Configuration Disclosure

ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may...

CVE-2020-36874 ACE SECURITY WIP-90113 Unauthenticated Configuration Disclosure

ACE SECURITY WIP-90113 HD cameras contain an unauthenticated configuration disclosure vulnerability in the /web/cgi-bin/hi3510/backup.cgi endpoint. The endpoint permits remote download of a compressed configuration backup without requiring authentication or authorization. The exposed backup may...

Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication

CVE-2023-27532 - Veeam Backup & Replication Vulnerability...

PT-2025-48194

Name of the Vulnerable Software and Affected Versions Astak CM-818T3 2.4GHz wireless security surveillance cameras affected versions not specified Description The cameras have an unauthenticated configuration disclosure issue in the /web/cgi-bin/hi3510/backup.cgi endpoint. This endpoint allows...

ESCAM QD-900 WIFI HD Camera 访问控制错误漏洞

ESCAM QD-900 WIFI HD Camera is a wireless HD camera from ESCAM, China. The ESCAM QD-900 WIFI HD Camera suffers from an Access Control Error vulnerability that originates from the /web/cgi-bin/hi3510/backup.cgi endpoint that can remotely download a compressed configuration backup without...

PT-2025-48192

Name of the Vulnerable Software and Affected Versions ESCAM QD-900 WIFI HD cameras affected versions not specified Description The ESCAM QD-900 WIFI HD cameras have an issue where the /web/cgi-bin/hi3510/backup.cgi endpoint allows the download of a compressed configuration backup without...

Astak CM-818T3 访问控制错误漏洞

The Astak CM-818T3 is a wireless security camera from Astak. The Astak CM-818T3 suffers from an Access Control Error vulnerability that originates in the /web/cgi-bin/hi3510/backup.cgi endpoint to remotely download a compressed configuration backup without authentication, which could lead to...

ACE SECURITY WIP-90113 访问控制错误漏洞

ACE SECURITY WIP-90113 is a high-definition camera from ACE SECURITY, Japan. The ACE SECURITY WIP-90113 suffers from an Access Control Error vulnerability that originates in the /web/cgi-bin/hi3510/backup.cgi endpoint that can remotely download a compressed configuration backup without...

PT-2025-48195

Name of the Vulnerable Software and Affected Versions ACE SECURITY WIP-90113 HD cameras affected versions not specified Description ACE SECURITY WIP-90113 HD cameras have an issue where the /web/cgi-bin/hi3510/backup.cgi API endpoint allows the remote download of a compressed configuration backup...

CVE-2025-12628

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them...

CVE-2025-12394

The Backup Migration WordPress plugin before 2.0.0 does not properly generate its backup path in certain server configurations, allowing unauthenticated users to fetch a log that discloses the backup filename. The backup archive is then downloadable without authentication...

📄 WordPress Backup Migration 1.2.8 Remote Code Execution

WordPress Backup Migration plugin version 1.2.8 proof of concept code injection exploit for an older vulnerability from 2023. ============================================================================================================================================= | Title : WordPress Backup...

EUVD-2025-198648

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them...

CVE-2025-12628

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them...

CVE-2025-12628 WP 2FA < 3.0.0 - Second Factor Bypass

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them...

CVE-2025-12628 WP 2FA < 3.0.0 - Second Factor Bypass

The WP 2FA WordPress plugin does not generate backup codes with enough entropy, which could allow attackers to bypass the second factor by brute forcing them...

CVE-2025-12628

CVE-2025-12628 concerns the WordPress plugin “WP 2FA” where backup codes are generated with insufficient entropy, enabling brute-force attempts to bypass the second factor. Affected software: WP 2FA (Two-factor authentication for WordPress) — versions up to 3.0.0 (per enrichment). Root cause: bac...