WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on servers running PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Backup Migration, which stems from an...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 1

Package name:xms10.14.0.10118.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces:None Date: November 2021 Languages supported:English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensure that you hav...

Moodle Input Validation Error Vulnerability (CNVD-2021-92540)

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. a security vulnerability exists in Moodle, which stems from a problem when the software restores backup files. an attacker could...

Backup Migration < 1.1.6 - Admin+ Stored Cross-Site Scripting

The plugin does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks...

WordPress Backup Migration plugin <= 1.1.5 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability discovered by Vlad Visse Patchstack in WordPress Backup Migration plugin versions = 1.1.5. Solution Update the WordPress Backup Migration plugin to the latest available version at least 1.1.6...

PT-2021-5354 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.11 to 3.11.3 Moodle versions 3.10 to 3.10.7 Moodle versions 3.9 to 3.9.10 Moodle versions earlier than 3.9 Description: The issue is related to errors in code generation management, allowing a remote attacker to execute...

Moodle 输入验证错误漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. a security vulnerability exists in Moodle, which stems from a problem when the software restores backup files. an attacker could...

Top 10 Cybersecurity Best Practices to Combat Ransomware

If you’re like most IT professionals, the threat of a ransomware attack might keep you up at night. And you have a valid reason to worry — ransomware doesn’t discriminate. Organizations across every industry, public or private, are potential victims, if they haven’t been victims already. In fact,...

The importance of backing up

What does backing up something mean? Backing up is the act of making a copy or copies of a file. These files are stored somewhere other than where the originals are located. You may only need to back up a few files, or it might be a much bigger effort. Requirements may differ greatly depending on...

DELL Dell EMC Avamar Server 安全漏洞

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. A security vulnerability exists in Dell EMC Avamar, which can be exploited by an attacker to bypass access restrictions via user backup data on a Dell EMC Avamar Server in order to...

DELL Dell EMC Avamar Server 安全漏洞

DELL Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. A security vulnerability exists in Dell EMC Avamar, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...

WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion

Exploit Title: WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion Date: 11/07/2021 Exploit Author: Murat DEMIRCI @butterflyhunt3r Vendor Homepage: https://www.miniorange.com/ Software Link: https://wordpress.org/plugins/backup-and-restore-for-wp/ Version: 1.0.3 Tested on : Window...

WordPress Backup and Restore 1.0.3 Plugin - Arbitrary File Deletion Vulnerability

Exploit Title: WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion Exploit Author: Murat DEMIRCI @butterflyhunt3r Vendor Homepage: https://www.miniorange.com/ Software Link: https://wordpress.org/plugins/backup-and-restore-for-wp/ Version: 1.0.3 Tested on : Windows 10 Poc:...

Backup and Restore <= 1.0.3 - Admin+ Arbitrary File Deletion

The plugin does not sanitise and validate the foldername parameter when deleting a report, which could allow high privilege users to delete arbitrary files on the web server, including those outside of the WordPress folder POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: / Accept-Language:...

Backup and Restore <= 1.0.3 - Admin+ Arbitrary File Deletion

The plugin does not sanitise and validate the foldername parameter when deleting a report, which could allow high privilege users to delete arbitrary files on the web server, including those outside of the WordPress folder PoC POST /wp-admin/admin-ajax.php HTTP/1.1 Accept: / Accept-Language:...

WordPress Backup And Restore 1.0.3 Arbitrary File Deletion

Exploit Title: WordPress Plugin Backup and Restore 1.0.3 - Arbitrary File Deletion Date: 11/07/2021 Exploit Author: Murat DEMIRCI @butterflyhunt3r Vendor Homepage: https://www.miniorange.com/ Software Link: https://wordpress.org/plugins/backup-and-restore-for-wp/ Version: 1.0.3 Tested on : Window...

WordPress Backup and Restore plugin <= 1.0.3 - Arbitrary File Deletion vulnerability

Arbitrary File Deletion vulnerability discovered by Murat DEMIRCI in WordPress Backup and Restore plugin versions = 1.0.3. Solution No known fix...

List of Security Fixes and Improvements in Veeam Plug-in for Nutanix AHV

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Plug-in for Nutanix AHV. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases. Security...

Release Information for Veeam Backup for Microsoft 365 5d Cumulative Patch KB4235

This patch is superseded by Veeam Backup for Microsoft 365 5d Cumulative Patch KB4278 Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.3.1033 or 5.0.3.1035 prior to installing this Cumulative Patch. You can check this under Help and Support About in Veeam Backu...

exFAT Filesystem May Corrupt Veeam Backup Files

Challenge Testing performed in Veeam labs has determined that, in rare cases, Veeam backups may become corrupted when stored on the exFAT file system. Cause The issue appears to be related to a buffer management issue in the exFAT file system driver. There are no similar issues on other, more...