pgbackrest

pgBackRest 신뢰할 수 있는 PostgreSQL 백업 및 복원 소개 pgBackRest는 가장 큰 데이터베이스와 워크로드까지 원활하게 확장되는 PostgreSQL용 신뢰할 수 있는 백업 및 복원 솔루션입니다. pgBackRest v2.59.1이 현재 안정 버전입니다. 릴리스 노트는 릴리스 페이지에서 확인할 수 있습니다. pgBackRest가 마음에 드신다면 GitHub에서 스타를 눌러 주세요! 뉴스 2026년 8월 17일 - pgBackRest 2.59.1 릴리스 2026년 7월 20일 - 새 배포 타르볼 2026년...

CVE-2026-77006

The WebTotem Backups WordPress plugin through 1.0.1 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the...

EUVD-2026-76814

The WebTotem Backups WordPress plugin through 1.0.1 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the...

CVE-2026-77006 WebTotem Backups <= 1.0.1 - Subscriber+ Arbitrary File Deletion via Path Traversal

The WebTotem Backups WordPress plugin through 1.0.1 does not validate a user-supplied file path, does not check the capability of the user making the request, and discards the result of its own CSRF check, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the...

CVE-2026-77006

WebTotem Backups WordPress plugin versions through 1.0.1 contain an arbitrary file deletion vulnerability. The plugin fails to validate a user-supplied file path, does not verify the capability of the requesting user, and discards the result of its own CSRF check. Any authenticated user with subs...

iOSRestrictionBruteForce

iOS 제한 암호 무차별 대입 개요 이 버전의 애플리케이션은 Python으로 작성되었으며, iPhone/iPad의 제한 암호를 크랙하는 데 사용됩니다. 이 도구는 암호화되지 않은 백업의 취약점을 이용하여 해시와 솔트를 발견합니다. 종속성 이 도구는 Python 2.7 및 Python 3.7에서 테스트되었습니다. requests가 필요합니다. pip install requests로 설치하세요. 사용법 root@kitploit: usage: ioscrack.py -h -c --mojave -b folder iDevice의 제한 암...

Discourse Backup File Disclosure Via Default Nginx Configuration

Discourse is an open source platform for community discussion. This vulnerability only impacts Discourse instances configured to use FileStore--LocalStore which means uploads and backups are stored locally on disk. If an attacker knows the name of the Discourse backup file, the attacker can trick...

WordPress Plugin File Manager (wp-file-manager) Backup Disclosure

mndpsingh287 WP File Manager v6.4 and lower fails to restrict external access to the fmbackups directory with a .htaccess file. This results in the ability for unauthenticated users to browse and download any site backups, which sometimes include full database backups, that the plugin has taken...

lazywarden

Secure, Automated, and Multi-Cloud Bitwarden Backup and Import System Lazywarden is a Python automation tool designed to Backup and Restore data from your vault, including Bitwarden attachments. It allows you to upload backups to multiple cloud storage services and receive notifications across...

GHSA-P853-83GJ-WJJ3 NocoBase backup restore schema name allows command injection

Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...

EUVD-2026-44804

NocoBase backup restore schema name allows command injection...

NocoBase backup restore schema name allows command injection

Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...

CVE-2026-72881

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, database backup and restore command builders in packages/server/src/utils/backups/utils.ts and packages/server/src/utils/restore/utils.ts interpolate database names, usernames, and passwords into nested shell command...

CVE-2026-48120

Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...

CVE-2026-48120

Kakoune is a code editor. Prior to version 2026.05.21, the bundled, enabled by default, autorestore.kak script can be exploited by malicious backup files leading to arbitrary kakoune and shell commands being executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround, a...

CVE-2026-47362

Datadog Android app stores operationally sensitive content in plaintext SQLite databases via Room. Two databases analyzed: LocalNotificationDatabase (local_notifications; title, message, recipient, service, tags, on‑call/incident deeplinks) and SearchRecentDatabase (search_recents; stores every i...

Important: Red Hat Security Advisory: Red Hat OpenShift API for Data Protection

A new version of OpenShift API for Data Protection OADP is now available. OpenShift API for Data Protection OADP enables you to back up and restore application resources, persistent volume data, and internal container images to external backup storage. OADP enables both file system-based and...

CVE-2026-7693

The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the file POST parameter on the restoreBackup AJAX handler. The handler applies escattr — an HTML-context sanitizer that does not strip...

CVE-2026-18477

A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During...

PT-2026-67429

Name of the Vulnerable Software and Affected Versions GNU tar affected versions not specified Description A TOCTOU Time-of-Check Time-of-Use issue exists in the incremental dumpdir X rename handling. This occurs when a local attacker with write access to a directory being backed up can influence...