WordPress Keep Backup Daily Plugin <= 2.1.0 is vulnerable to Sensitive Data Exposure

Software Keep Backup Daily Type Plugin Vulnerable versions = 2.1.0 Fixed in N/A OWASP Top 10 A8: Software and Data Integrity Failures Classification Sensitive Data Exposure CVE CVE-2024-48024 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID 104015a1054b Credits Joshua Chan...

JetBrains TeamCity Cross-Site Scripting Vulnerability

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that stems from an issue in the backup configuration settings. An attacker could use...

CVE-2024-47950

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-47950

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings...

CVE-2024-47950

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings...

CVE-2024-47950

CVE-2024-47950 affects JetBrains TeamCity prior to 2024.07.3 and corresponds to a stored XSS vulnerability in the Backup configuration settings. The issue arises from handling backup configuration data, enabling an attacker to inject script that could be stored and later executed in a victim’s br...

CVE-2024-47950

In JetBrains TeamCity before 2024.07.3 stored XSS was possible in Backup configuration settings...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-47949

CVE-2024-47949 affects JetBrains TeamCity, with the path traversal vulnerability in the backup handling prior to 2024.07.3 that allows writing backup files to an arbitrary location. Multiple connected sources corroborate the issue in TeamCity versions before 2024.07.3; this could lead to disclosu...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.21 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Backup and Staging by WP Time Capsule versions = 1.22.21...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A path traversal vulnerability exists in JetBrains...

JetBrains TeamCity 安全漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. An information disclosure vulnerability exists in...

WordPress Backup and Staging by WP Time Capsule Plugin <= 1.22.21 is vulnerable to SQL Injection

Software Backup and Staging by WP Time Capsule Type Plugin Vulnerable versions = 1.22.21 Fixed in 1.22.22 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-48020 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 257cfd27ce2c Credits Hakiduck Required...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a Continuous Integration CI/CD tool that is primarily used to automate the software build, test, and deployment process. JetBrains TeamCity suffers from a cross-site scripting vulnerability that stems from an issue in the backup configuration settings. An attacker could use...

PT-2024-7657 · Jetbrains · Jetbrains Teamcity +1

Name of the Vulnerable Software and Affected Versions: JetBrains TeamCity versions prior to 2024.07.3 Description: The issue is related to stored XSS in the Backup configuration settings of JetBrains TeamCity. This could allow a remote attacker to perform cross-site scripting. Recommendations: Fo...

The vulnerability in the script /view/DBManage/Backup_Server_commit.php of the D-Link DAR-7000 and DAR-8000 router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the /view/DBManage/BackupServercommit.php script of the D-Link DAR-7000 and DAR-8000 router microprogramming systems exists due to the failure to address the need to neutralize certain special elements used in the operating system commands. Exploiting this vulnerability allow...

The vulnerability of Veeam Backup & Replication’s protection mechanisms for cloud, virtual, and physical systems stems from deficiencies in access control. This allows attackers to gain unauthorized access to the NTLM hash of the Enterprise Manager service account.

The vulnerability of Veeam Backup & Replication’s protection mechanisms for cloud, virtual, and physical systems stems from deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to the NTLM hash of the Enterprise Manager service account...

CVE-2024-20448

A vulnerability in the Cisco Nexus Dashboard Fabric Controller NDFC software, formerly Cisco Data Center Network Manager DCNM, could allow an attacker with access to a backup file to view sensitive information. This vulnerability is due to the improper storage of sensitive information within conf...