15164 matches found
CVE-2025-56435
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and the operation on the parameter id...
CVE-2025-56435
SQL Injection vulnerability in FoxCMS v1.2.6 and before allows a remote attacker to execute arbitrary code via the. file /DataBackup.php and the operation on the parameter id...
FoxCMS 安全漏洞
FoxCMS is a free commercial open source content management system from China Qianxu FoxCMS company. A security vulnerability exists in FoxCMS v1.2.6 and earlier versions, which originates from the incorrect operation of the parameter id in the file /DataBackup.php leading to SQL injection...
Linux Distros Unpatched Vulnerability : CVE-2017-11183
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - front/backup.php in GLPI before 9.1.5 allows remote authenticated administrators to delete arbitrary files via a crafted file parameter. CVE-2017-11183 Note tha...
Console Connection to Veeam Software Appliance Unstable When IPv6 is Disabled
Challenge When IPv6 has been disabled in the Veeam Host Management Console settings, actions within the Veeam Backup & Replication Console on a remote machine may be slow to initiate or fail if IPv6 has not also been disabled in the Console settings. Cause This issue occurs when the IPv6...
Linux Distros Unpatched Vulnerability : CVE-2018-14335
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their...
Release Information for Veeam ONE 13.0.1 Patch 1
Veeam ONE 13 Releases 13.0.2.6723 2026-05-27 What's New New Features and Improvements Suspicious Incremental Backup Size Alarm -- Extended Platform Support The Suspicious Incremental Backup Size alarm now covers all platforms supported in Veeam ONE v13, including Proxmox VE, oVirt KVM Oracle Linu...
Command Injection
Overview nitsan/ns-backup is an extension for TYPO3 that lets you save your code, files, and database with just a few clicks. Install Backup Plus and connect it to your cloud storage like Google Drive, Dropbox, Amazon S3, SFTP, Rsync, etc.. Affected versions of this package are vulnerable to...
CVE-2025-9573
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
CVE-2025-9573
The CVE-2025-9573 entry concerns TYPO3 ns_backup (ns-backup) extension versions up to 13.0.2, where a command injection flaw exists in the generateBackup function. The root cause is improper handling of input that leads to arbitrary command execution when an administrator uses the extension’s bac...
CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
PT-2025-35546
Name of the Vulnerable Software and Affected Versions: TYPO3 ns backup extension versions through 13.0.2 Description: The ns backup extension for TYPO3 allows command injection. Recommendations: Update to a version beyond 13.0.2...
Linux Distros Unpatched Vulnerability : CVE-2023-28330
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient sanitizing in backup resulted in an arbitrary file read risk. The capability to access this feature is only available to teachers, managers and...
Linux Distros Unpatched Vulnerability : CVE-2021-3943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restori...
Linux Distros Unpatched Vulnerability : CVE-2024-43440
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in moodle. A local file may include risks when restoring block backups. CVE-2024-43440 Note that Nessus relies on the presence of the package a...
Linux Distros Unpatched Vulnerability : CVE-2020-11060
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an...
Linux Distros Unpatched Vulnerability : CVE-2012-10059
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM versions = 3.1.1 and = 3.2.0 contain a post-authenticated OS command injection vulnerability in its database backup feature. The export.php...
