CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

CVE-2021-34588 Bender Charge Controller: Unprotected data export

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

CVE-2021-34588

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

PT-2022-10359

Name of the Vulnerable Software and Affected Versions Bender/ebee Charge Controllers affected versions not specified Description The issue concerns unprotected data export in Bender/ebee Charge Controllers. The backup export is protected via a random key that is set at user login, but this key is...

CVE-2021-34588: Direct Request

In Bender/ebee Charge Controllers in multiple versions are prone to unprotected data export. Backup export is protected via a random key. The key is set at user login. It is empty after reboot...

CVE-2022-28527

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del...

CVE-2022-28527

dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del...

DhCms path traversal vulnerability

DhCms Dinghua Cloud CMS is a content management system based on PHP and MySQL. A security vulnerability exists in DhCms version 20170919, which originated from an arbitrary folder deletion vulnerability found via /admin.php?r=admin/AdminBackup/del...

GHSA-358R-G2XW-7C83 Moodle backs up private files

Moodle before 2.2.2, 2.1.5, and 2.0.8 had users' private files included in course backups unnecessarily...

Hive Ransomware targets organizations with ProxyShell exploit

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Hive Ransomware has been active since its discovery in June 2021, and it is constantly deploying different backdoors, including the Cobalt Strike beacon, on Microsoft Exchange servers that are vulnerable to ProxyShell...

Veeam Backup & Replication installer fails to launch with the error: "Only one instance of Veeam Backup & Replication Setup is allowed."

Challenge When attempting to launch the Veeam Backup & Replication installer, the following error occurs: Only one instance of Veeam Backup & Replication Setup is allowed. Copy Cause Another instance of the Veeam Backup & Replication Setup.exe is already running. Solution Open Task Manager and...

CVE-2022-0993

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and...

Authentication flaw

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and...

CVE-2022-0993

The SiteGround Security plugin for WordPress is vulnerable to authentication bypass that allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation that logs users in upon success. This affects versions up to, and...

MetaMask Asks Apple Users to Disable iCloud Backup for Wallet After User Lost $650,000

By Waqas MetaMask has warned Apple users to disable automatic iCloud backup of their wallet data. The warning results from… This is a post from HackRead.com Read the original post: MetaMask Asks Apple Users to Disable iCloud Backup for Wallet After User Lost $650,000...

PT-2022-13578 · Siteground · Siteground Security Plugin

Name of the Vulnerable Software and Affected Versions: SiteGround Security plugin for WordPress versions up to, and including, 1.2.5 Description: The issue allows unauthenticated users to log in as administrative users due to missing identity verification on the 2FA back-up code implementation th...

Kaseya Unitrends Client/Agent security vulnerabilities

Kaseya Unitrends Client/Agent is a cloud-based enterprise backup and disaster recovery technology from Kaseya Corporation, USA. A security vulnerability exists in Kaseya Unitrends Client/Agent version 10.5.5 and prior versions. An attacker can exploit this vulnerability to execute arbitrary code...

Virtuozzo Hybrid Server 7.5 Update 3 Hotfix 1 (7.5.3-396)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 3 provides stability and usability bug fixes Vulnerability id: PSBM-139281 Optimized cache and memory usage while creating backups. Vulnerability id: PSBM-139170 The container backup process could hang when working with NFS backup storage...

Cross-Regional Disaster Recovery with Elasticsearch

Unsurprisingly, here at Rewind, we've got a lot of data to protect over 2 petabytes worth. One of the databases we use is called Elasticsearch ES or Opensearch, as it is currently known in AWS. To put it simply, ES is a document database that facilitates lightning-fast search results. Speed is...

WordPress WPvivid Backup and Migration plugin任意文件读取漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. WordPress plugin is a WordPress open source application plugin. WordPress WPvivid Backup and Migration plugin version 0.9.70 and previous versions contain an arbitrary file read vulnerability. An...