17818 matches found
NAKIVO Backup and Replication Absolute Path Traversal Vulnerability
NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files...
Error: "Cannot find the object on the mount host."
Challenge When attempting to perform a Guest Files restore from Veeam Backup Enterprise Manager, the restore fails with the error: Cannot find the object on the mount host. Read KB4722 for more details. Cause This error occurs when the Guest OS partition that is being mounted is formatted with a...
CVE-2025-23120
Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...
PT-2025-11675
Name of the Vulnerable Software and Affected Versions FoodBakery | Delivery Restaurant Directory WordPress Theme versions up to 4.7 Description The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on several functions, including foodbakery var backup fil...
CVE-2024-54525
A logic issue was addressed with improved file handling. This issue is fixed in visionOS 2.2, watchOS 11.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2. Restoring a maliciously crafted backup file may lead to modification of protected system files...
CVE-2024-54525
A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Restoring a maliciously crafted backup file may lead to modification of protected system files...
CVE-2024-54525
A logic issue in the MobileBackup service allows for the unrestricted loading of dangerous files across multiple Apple operating systems, including macOS, iOS, iPadOS, watchOS, tvOS, and visionOS . An attacker can exploit this by restoring a maliciously crafted backup file , which may lead to the...
CVE-2024-54525
A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Restoring a maliciously crafted backup file may lead to modification of protected system files...
1 in 10 people do nothing to stay secure and private on vacation
This year, Spring Break vacationers are packing more than their flip-flops, bucket hats, and sunglasses—they’re also packing a few cybersecurity anxieties for the trip. According to new research from Malwarebytes, 52% of people said they “worry about being scammed while traveling,” while another...
CVE-2024-54525: Unrestricted Upload of File with Dangerous Type
A logic issue was addressed with improved file handling. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, tvOS 18.2, visionOS 2.2, watchOS 11.2. Restoring a maliciously crafted backup file may lead to modification of protected system files...
VulnCheck KEV: CVE-2024-48248
NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files...
CVE-2024-10942
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.89 via deserialization of untrusted input in the 'replaceserializedvalues' function. This makes it possible for unauthenticated attackers to inject a PHP Objec...
Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025
As IT environments grow more complex, IT professionals are facing unprecedented pressure to secure business-critical data. With hybrid work the new standard and cloud adoption on the rise, data is increasingly distributed across different environments, providers and locations, expanding the attac...
PT-2025-11168
Name of the Vulnerable Software and Affected Versions: All-in-One WP Migration and Backup plugin for WordPress versions up to, and including, 7.89 Description: The issue allows unauthenticated attackers to inject a PHP Object via deserialization of untrusted input in the replace serialized values...
CVE-2024-10942: Deserialization of Untrusted Data
The All-in-One WP Migration and Backup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 7.89 via deserialization of untrusted input in the 'replaceserializedvalues' function. This makes it possible for unauthenticated attackers to inject a PHP Objec...
The vulnerability of the Azure Agent for Backup software, which is responsible for data backup, and the Azure Agent for Site Recovery software, which handles replication and disaster recovery, allows a malicious individual to elevate their privileges to a system-level level.
The vulnerability of the Azure Agent for Backup software, as well as the Azure Agent for Site Recovery software, relates to insecure privilege management. Exploiting this vulnerability could allow an attacker to elevate their privileges to a system-level level...
QNAP Systems HBS 3 Hybrid Backup Sync Buffer Overflow Vulnerability
QNAP Systems HBS 3 Hybrid Backup Sync is a data management tool that integrates backup, restore and synchronization functions on Weilian's NAS devices, supporting local, remote and cloud storage backups and providing an efficient data protection solution. A buffer overflow vulnerability exists in...
Microsoft Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability
Microsoft Azure Agent Installer for Backup and Site Recovery provides disaster recovery solutions for local computers and Azure VMs. An elevation of privilege vulnerability exists in Microsoft Azure Agent Installer for Backup and Site Recovery, which can be exploited by an attacker to elevate...
