EUVD-2026-75097

CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...

CVE-2026-8044

CWE-88: Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability exists that could cause remote code execution by an attacker with a privileged account when malicious arguments are provided as backup configuration parameters...

CVE-2026-8044

CVE-2026-8044 is a CWE-88 (Argument Injection) vulnerability in Schneider Electric software, enabling remote code execution when a privileged attacker supplies malicious arguments as backup configuration parameters . The CVSS 4.0 score is 8.6 (HIGH) , with low attack complexity and no user intera...

veritas-backup

This repository does not have a README...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

CVE-2026-86748

Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger permanent data loss with no recovery path or rollback mechanism...

EUVD-2026-74925

Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger permanent data loss with no recovery path or rollback mechanism...

CVE-2026-86748 Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive

Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger permanent data loss with no recovery path or rollback mechanism...

CVE-2026-86748 Snipe-IT before 8.7.0 Database Wipe via Invalid Backup Archive

Snipe-IT versions before 8.7.0 wipe the database before validating the uploaded backup archive in the restore endpoint. Superusers uploading corrupted or invalid zip files trigger permanent data loss with no recovery path or rollback mechanism...

CVE-2026-86748

Snipe-IT versions before 8.7.0 contain a vulnerability in the restore endpoint where the database is wiped before the uploaded backup archive is validated. A superuser uploading a corrupted or invalid zip file triggers permanent data loss with no recovery path or rollback mechanism. The CVSS 3.1 ...

CVE-2024-38077-POC

CVE-2024-38077-POC 伪代码，备份用，非原创，请关注原文作者： 漏洞作者已经发布分析文章第一篇：https://sites.google.com/site/zhiniangpeng/blogs/MadLicense...

veeam-velociraptor

Artefactos de Velociraptor para Veeam Backup & Replication - PoC Este repositorio contiene una colección de artefactos de Velociraptor que actúan como prueba de concepto para un pipeline de análisis forense remoto de Veeam Backup & Replication: artifacts/ contiene las definiciones de los artefact...

CVE-2024-9290

CVE-2024-9290 Super Backup & Clone - Migrate for WordPress = 2.3.3 - Carga arbitraria de archivos no autenticada Descripción El plugin Super Backup & Clone - Migrate for WordPress para WordPress es vulnerable a la carga arbitraria de archivos debido a la falta de validación del tipo de archivo y ...

CVE-2025-5961

🚨 Migration, Backup, Staging – WPvivid Backup & Migration 📈 This vulnerability affects a plugin with over700,000+ installs 📝 CVE Details CVE: CVE-2025-5961 CVSS: 7.2 High Published: July 3, 2025 🔍 Description The Migration, Backup, Staging – WPvivid Backup & Migration plugin for WordPress is...

CVE-2023-30146

CVE-2023-30146 - Exploit de Cámara Web Assmann/HooToo - Exposición de Datos Sensibles Descripción Se descubrió un problema en las cámaras IP de las marcas HooToo y Assmann. El firmware almacena las credenciales del administrador y del usuario en la copia de seguridad en texto plano. La copia de...

CVE-2024-0044-EXP

CVE-2024-0044-EXP Exploit CVE-2024-0044 on Android 12, 13 before the March 2024 security update for data backup Usage ./CVE-2024-0044-EXP.sh Sample ./CVE-2024-0044-EXP.sh com.tencent.mm Description Vulnerability discovery https://rtx.meta.security/exploitation/2024/03/04/Android-run-as-forgery.ht...

CVE-2023-6553

CVE-2023-6553 Exploit Development for CVE-2023-6553 on Backup Plugin in Wordpress This is a critical CVE with a CVSS score of 9.8 The vulnerability allows attacker to send commands to the server running the vulnerable version of the plugin Vulnerable Version Backup = 1.3.7 Set up 1. git clone the...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Veeam Backup & Replication Vulnerability Vulnerability Description Veeam Backup & Replication contains a vulnerability that allows encrypted credentials stored in the configuration database to be obtained, allowing attackers to access backup infrastructure hosts. Nuclei Template...

CVE-2018-4878-

-cms Server cluster batch identification of cms, batch backup search, batch injection. VIP group version backup...

CVE-2024-40711

CVE-2024-40711 Exploit for Veeam backup and Replication Pre-Auth Deserialization CVE-2024-40711 See our blog post for technical details https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC in Action root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Veeam -c...