Moderate: Red Hat Security Advisory: openstack-cinder security update

Updated openstack-cinder packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 6.0 Juno for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which...

Database Backup Download Vulnerability in Joomla!

Joomla! is an open source content management system CMS. A database backup download vulnerability exists in joomla version 1.6.x. The vulnerability stems from the program's failure to adequately filter user-submitted input, which can be exploited by an attacker to download database backups to...

Insecure NAS Device Exposes 350 Ameriprise Investment Accounts

A trove of data belonging to Ameriprise Financial was found earlier this month that included Social Security numbers, decryption keys and confidential internal company documents. The breach is related to the use of a network attacked storage device that insecurely backed up data from an internal...

Arbitrary File Deletion Vulnerability in MOMOCMS

MoMoCMS is an enterprise building system developed by php+MySQL. An arbitrary file deletion vulnerability exists in the MOMOCMS 'unlink' function. Due to obtaining the within to be deleted via $GET'file' allows an attacker to delete database files backed up by the administrator...

Moderate: Red Hat Security Advisory: atomic-openshift-utils security and bug fix update

An update for openshift-ansible and ansible is now available for OpenShift Container Platform 3.2 and 3.3. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

MyBB < 1.8.8 Multiple Vulnerabilities

Binary data 9777.prm...

SweetRice Backup Information Disclosure Vulnerability

SweetRice CMS is an open source web content management system CMS. The system provides search engine optimization and other features. SweetRice version 1.5.1 suffers from a backup information disclosure vulnerability, which can be exploited by an attacker to obtain database and website backup...

Swiss Star: extortion virus is a new variant after the poisoning 1 0 5 4 full file encryption-vulnerability warning-the black bar safety net

Recently, the rising“cloud security”system intercepted a new type of blackmail Virus, the virus encrypts files up to 1 0 5 4, file Unified encryption for. encrypted format, thus a ransom of 1 bitcoinabout RMB 4 5 0 0 Yuan. If the user is not within the prescribed time hack payment, the encrypted...

Wordpress recent-backups plugin file download vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. recent-backups is one of the version of the back plugin. A file download vulnerability exists in version v0.7 of the Wordpress recent-backups plugin, which can be exploited by remote...

Zenario ProBusiness Backup Information Disclosure Vulnerability

Zenario is a web-based content management system and multilingual pages. Zenario ProBusiness version 7.3.0.37342 suffers from a backup information disclosure, which can be exploited by an attacker to obtain website backup information...

CVE-2015-1000006

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

Remote file inclusion

Remote file download vulnerability in recent-backups v0.7 wordpress plugin...

CVE-2015-1000006

CVE-2015-1000006 corresponds to a remote file download vulnerability in the WordPress plugin recent-backups v0.7. Connected sources confirm a file‑download flaw in the plugin, with OpenVAS and WPVulnDB noting directory traversal/file download risk and WPEX exploit notes that download-file.php doe...

Name of Backups Entry Does Not Match Job Name

Challenge The name of the backup job has been changed, causing entries found under the Backups node to no longer match their associated job. In the example screenshot above, the job was first run with the name "Backup Job 1," and after the initial run, the job was renamed to "DC Backup." The...

Apple Weakens iOS 10 Backup Encryption; Now Can Be Cracked 2,500 Times Faster

After the iPhone encryption battle between Apple and the FBI, Apple was inspired to work toward making an unhackable future iPhones by implementing stronger security measures even the company can't hack. Even at that point the company hired one of the key developers of Signal — one of the world's...

CVE-2016-0903

Avamar Data Store ADS and Avamar Virtual Edition AVE in EMC Avamar Server before 7.3.0-233 rely on client-side authentication, which allows remote attackers to spoof clients and read backup data via a modified client agent...

SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation

SolarWinds Kiwi CatTools 3.11.0 - Unquoted Service Path Privilege Escalation Document Title: ================ SolarWinds Kiwi CatTools Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service Introduction...

Unauthorized Access Vulnerability in Founder's Firewall

Founder Firewall is a protection system developed by Founder Group to maintain information security. An unauthorized access vulnerability exists in the Founder's Firewall, which allows an attacker to exploit the vulnerability to obtain a configuration backup file with unauthorized access to obtai...

Fortinet FortiWAN Information Disclosure Vulnerability (CNVD-2016-07347)

Fortinet FortiWAN is a WAN link load balancing product developed by Fortinet. An information disclosure vulnerability exists in Fortinet FortiWAN. An attacker can exploit this vulnerability by accessing the URL /script/cfgshow.php page to obtain a backup file of the device configuration, or by...

The vulnerability of the Android operating system, which allows a hacker to access the backup data.

The vulnerability of the software interface of the Android operating system’s framework is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to data backups through a specially created application...