15213 matches found
WordPress Backup and Staging by WP Time Capsule plugin <= 1.22.20 - Authentication Bypass and Privilege Escalation Vulnerability
Authentication Bypass and Privilege Escalation Vulnerability discovered by Dave Jong Patchstack in WordPress Plugin Backup and Staging by WP Time Capsule versions = 1.22.20...
How to Backup the XenMobile Database
This article describes how to back up the XenMobile database...
VulnCheck KEV: CVE-2024-38770
Improper Privilege Management vulnerability in Revmakx Backup and Staging by WP Time Capsule allows Privilege Escalation, Authentication Bypass.This issue affects Backup and Staging by WP Time Capsule: from n/a through 1.22.20...
XenServer - Overview of Disaster Recovery Options
This article provides an overview of different backup/restore methods available in XenServer for Virtual Machine Metadata. Background Backup/Restore or Site Recover/Disaster Recovery options in XenServer have evolved over recent product versions. This document briefly explains those options...
WordPress Backup and Staging by WP Time Capsule Plugin <= 1.22.20 is vulnerable to Privilege Escalation
Software Backup and Staging by WP Time Capsule Type Plugin Vulnerable versions = 1.22.20 Fixed in 1.22.21 OWASP Top 10 A1: Broken Access Control Classification Privilege Escalation CVE CVE-2024-38770 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 3832eb3f9ffc Credits Da...
Using Veeam Backup Software on Provisioning Services Server
While running Veeam software to backup Provisioning Services PVS servers, one of the PVS servers display status as Down in PVS server console regardless of whether the stream service is running. The following screen shot shows the server status in PVS console. The following screen shot shows the...
Arbitrary File Overwrite
aim is vulnerable to Arbitrary File Overwrite. The vulnerability is due to improper handling of the runhash and repo.path parameters in the backuprun-function, allowing any file on the host server to be overwritten and arbitrary data to be exfiltrated...
Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 8
Package name: xms10.15.0.10808.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10731.bin, xms10.15.0.10624.bin, xms10.15.0.10517.bin, xms10.15.0.10417.bin, xms10.15.0.10327.bin, xms10.15.0.10220.bin, and xms10.15.0.10125.bin Date: July 2024 Languages...
CVE-2024-37113 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...
CVE-2024-37113 WordPress WishList Member X plugin < 3.26.7 - Unauthenticated Database Backup Download vulnerability
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Membership Software WishList Member X.This issue affects WishList Member X: from n/a before 3.26.7...
CVE-2024-40331
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/dbBakMySQLdeal.php?mudi=backup...
CVE-2024-40329
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/softBakdeal.php?mudi=backup...
New Ransomware Group Exploiting Veeam Backup Software Vulnerability
A now-patched security flaw in Veeam Backup & Replication software is being exploited by a nascent ransomware operation known as EstateRansomware. Singapore-headquartered Group-IB, which discovered the threat actor in early April 2024, said the modus operandi involved the exploitation of...
CVE-2024-40331
idccms v1.35 is affected by a Cross-Site Request Forgery (CSRF) in the admin function via /admin/dbBakMySQL_deal.php?mudi=backup. CVSS 3.1 base score 8.8 (High): Network, LOW attack complexity, NONE privileges, user interaction required; impact to confidentiality, integrity, and availability is H...
Net Titanium Technology idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in Net Titanium Technology idcCMS v1.35, which was discovered to contain a Cross Site...
Net Titanium Technology idcCMS Security Breach
Net Titanium Technology idcCMS Net Titanium IDC Cloud Management Agent System is a cloud management agent system from China's Net Titanium Technology Net Titanium Technology. A security vulnerability exists in Net Titanium Technology idcCMS v1.35, which was discovered to contain a Cross Site...
CVE-2024-38013
Microsoft Windows Server Backup Elevation of Privilege Vulnerability...
CVE-2024-38013
Microsoft Windows Server Backup Elevation of Privilege Vulnerability...
CVE-2024-38013
Technical details about CVE-2024-38013 are not disclosed in the provided connected documents. The CVE entry exists (Windows Server Backup elevation of privilege), but no affected product versions, root cause, exploitation, or remediation are described here. Monitor for updates.