15210 matches found
Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication
CVE-2024-40711 Exploit for Veeam backup and Replication Pre-A...
WordPress Migration, Backup, Staging – WPvivid plugin < 0.9.106 - Unauthenticated Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin WPvivid Backup and Migration versions 0.9.106...
OpenText eDirectory 安全漏洞
OpenText eDirectory is an identity management infrastructure platform that combines identity management architecture and directory services technology from OpenText Canada. The platform provides authentication policies, data backup and recovery services, and data disaster recovery. A security...
WordPress WPvivid Backup and Migration Plugin < 0.9.106 is vulnerable to Sensitive Data Exposure
Software WPvivid Backup and Migration Type Plugin Vulnerable versions 0.9.106 Fixed in 0.9.106 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-7315 Patch priority Low CVSS severity Low 7.5 Developer Claim ownership PSID d872d427e182 Credits Dmitrii...
Why Is It So Challenging to Go Passwordless?
Imagine a world where you never have to remember another password. Seems like a dream come true for both end users and IT teams, right? But as the old saying goes, "If it sounds too good to be true, it probably is." If your organization is like many, you may be contemplating a move to passwordles...
Release Information for Veeam Backup for Microsoft 365 8 Cumulative Patches
More Recent Version Available Please find the latest version of Veeam Backup for Microsoft 365 here: Veeam Downloads - Latest Version Requirements This Cumulative Patch can be used to: update manually from a previous Veeam Backup for Microsoft 365 8 release to the latest Cumulative Patch. upgrade...
CVE-2024-45044
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation i.e. "w" for "whoami" the ACL check did not apply to the full form i.e. "whoami" but to the abbreviated...
CVE-2024-45044 Bareos's negative command ACLs can be circumvented by abbreviating commands
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation i.e. "w" for "whoami" the ACL check did not apply to the full form i.e. "whoami" but to the abbreviated...
CVE-2024-45044 Bareos's negative command ACLs can be circumvented by abbreviating commands
Bareos is open source software for backup, archiving, and recovery of data for operating systems. When a command ACL is in place and a user executes a command in bconsole using an abbreviation i.e. "w" for "whoami" the ACL check did not apply to the full form i.e. "whoami" but to the abbreviated...
Multiple Vulnerabilities in Veeam Backup & Replication
On Wednesday, September 4, 2024, backup and recovery software provider Veeam released their September security bulletin disclosing various vulnerabilities in Veeam products. One of the higher-severity vulnerabilities included in the bulletin is CVE-2024-40711, a critical unauthenticated remote co...
New Veeam Vulnerability Puts Thousands of Backup Servers at Risk – PATCH NOW!
A critical vulnerability CVE-2024-40711 in Veeam Backup & Replication software allows attackers to gain full control without authentication.…...
CVE-2024-7689
The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
CVE-2024-7689
The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
CVE-2024-7689 Snapshot Backup <= 2.1.1 - Stored XSS via CSRF
The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
CVE-2024-7689
Snapshot Backup plugin for WordPress
CVE-2024-7689 Snapshot Backup <= 2.1.1 - Stored XSS via CSRF
The Snapshot Backup WordPress plugin through 2.1.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...
WordPress plugin Snapshot Backup 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
[SECURITY] [DLA 3880-1] amanda security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3880-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk September 07, 2024 https://wiki.debian.org/LTS -...
CVE-2024-42019
A vulnerability that allows an attacker to access the NTLM hash of the Veeam Reporter Service service account. This attack requires user interaction and data collected from Veeam Backup & Replication...