Apple iOS和iPadOS 后置链接漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A backlink vulnerability exists in Apple iOS version 18.3 and iPadOS version 18.3, which stems from the fact that restorin...

CVE-2024-57547

The CMSimple content management system (v.5.16) contains an insecure permissions vulnerability related to the backup file loading function . This flaw is caused by an improper assignment of permissions for a critical resource, allowing a remote attacker to use a crafted script to download PHP bac...

CMSimple 安全漏洞

CMSimple is a free content management system from CMSimple open source. A security vulnerability exists in CMSimple version 5.16, which stems from a vulnerability that allows remote attackers to download php backup files via a carefully crafted script that obtains sensitive information...

CVE-2024-57547: Incorrect Permission Assignment for Critical Resource

Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files...

CVE-2024-11936

The Zox News theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'backupoptions' and 'restoreoptions' function in all versions up to, and including, 3.16.0. This makes it possible for authenticated...

Oracle Critical Patch Update, January 2025 Security Update Review

Oracle released its first quarterly edition of this year’s Critical Patch Update, which received patches for 318 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, includin...

Backup or Backup Copy Job for SharePoint, OneDrive, or Teams Data Fails With: "Cannot find object"

Challenge After upgrading Veeam Backup for Microsoft 365 to v8 builds 8.0.2.159 or 8.0.2.200, an incremental backup or a backup copy job protecting SharePoint, OneDrive, or Teams data fails with the error: Cannot find object ... Cause In Object Storage Repositories, the metadata saved for the...

SharePoint and OneDrive Items May Not Be Displayed

Article Applicability The solution provided in this article requires Veeam Backup for Microsoft 365 8.1 or higher. The issue discussed in this article only occurs under particular circumstances. Review the Cause section closely. This article is marked as related to Veeam Backup for Microsoft 365 ...

Release Information for Veeam Backup for Microsoft 365 8.1 and Cumulative Patches

More Recent Version Available Please find the latest version of Veeam Backup for Microsoft 365 here: Veeam Downloads - Latest Version Build Numbers and Versions of Veeam Backup for Microsoft 365 Requirements This release can be used to: update manually from a previous Veeam Backup for Microsoft 3...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 6 (6.2.1-77)

This update provides stability fixes. Vulnerability id: VSTOR-86739 A stability fix for Backup Gateway. Vulnerability id: VSTOR-95704, VSTOR-95706 Stability fixes for the S3 service. Vulnerability id: VSTOR-97935 A stability fix for the storage service...

VulnCheck KEV: CVE-2025-23209

Craft CMS contains a code injection vulnerability caused by improper validation of the database backup path, ultimately enabling remote code execution...

PT-2025-1228 · Mercedes Benz · Mercedes-Benz Head-Unit Ntg6

Name of the Vulnerable Software and Affected Versions: Mercedes-Benz head-unit NTG6 affected versions not specified Description: The issue is related to a race condition in the Mercedes-Benz head-unit NTG6, which can be exploited by connecting to the Ethernet pins on the Base Board. This allows a...

CVE-2025-0215: Improper Neutralization of Input During Web Page Generation

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the showdata and initiaterestore parameters in all versions up to, and including, 1.24.12 due to insufficient input sanitization and output escaping. This makes it possible for...

WordPress plugin UpdraftPlus - Backup/Restore 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...

CVE-2025-23082

CVE-2025-23082 affects Veeam Backup for Microsoft Azure. The flaw is an SSRF vulnerability that could allow an unauthenticated attacker to send unauthorized requests from the system, potentially enabling network enumeration. Public details in the Veeam KB indicate the issue impacts Veeam Backup f...

CVE-2025-23082: Server-Side Request Forgery (SSRF)

Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...