Lucene search
+L

6226 matches found

Positive Technologies
Positive Technologies
•added 2025/01/04 12:00 a.m.•19 views

PT-2025-1614 · WordPress · Backup Migration Plugin

Name of the Vulnerable Software and Affected Versions: Backup Migration plugin for WordPress versions up to, and including, 1.4.6 Description: The issue concerns a PHP Object Injection vulnerability via deserialization of untrusted input in the recursive unserialize replace function. This allows...

8.8CVSS9.8AI score0.00798EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•4 views

CVE-2024-10957: Deserialization of Untrusted Data

The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions from 1.23.8 to 1.24.11 via deserialization of untrusted input in the 'recursiveunserializedreplace' function. This makes it possible for unauthenticated attackers to inject a P...

8.8CVSS6.1AI score0.00713EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/04 12:00 a.m.•9 views

CVE-2024-10932: Deserialization of Untrusted Data

The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted input in the 'recursiveunserializereplace' function. This makes it possible for unauthenticated attackers to inject a PHP Object. The...

8.8CVSS5.9AI score0.00798EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/04 12:00 a.m.•21 views

WordPress plugin Backup Migration 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

8.8CVSS8.4AI score0.00798EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/01/03 10:06 p.m.•19 views

WordPress Backup Migration plugin <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace' vulnerability

Unauthenticated PHP Object Injection via 'recursiveunserializereplace' vulnerability discovered by Webbernaut in WordPress Plugin Backup Migration versions = 1.4.6...

8.8CVSS7.3AI score0.00798EPSS
SaveExploits0References1Affected Software1
HackRead
HackRead
•added 2025/01/03 9:07 p.m.•15 views

Legacy App Migration: Transforming Outdated Systems

Businesses are perpetually under pressure to innovate in a fast-paced digital era. But legacy applications, written with outdated…...

7.2AI score
SaveExploits0
Patchstack
Patchstack
•added 2025/01/03 3:24 p.m.•17 views

WordPress Course Migration for LearnDash plugin 1.0.2 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Muhamad Agil Fachrian Patchstack Alliance in WordPress Plugin Course Migration for LearnDash versions 1.0.2...

6.4CVSS7AI score0.00277EPSS
SaveExploits0Affected Software1
The Hacker News
The Hacker News
•added 2025/01/03 6:49 a.m.•12 views

Critical Deadline: Update Old .NET Domains Before January 7, 2025 to Avoid Service Disruption

Microsoft has announced that it's making an "unexpected change" to the way .NET installers and archives are distributed, requiring developers to update their production and DevOps infrastructure. "We expect that most users will not be directly affected, however, it is critical that you validate i...

7AI score
SaveExploits0
NVD
NVD
•added 2025/01/02 12:15 p.m.•16 views

CVE-2023-45636

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through = 1.4.1...

5.4CVSS0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/02 11:59 a.m.•13 views

CVE-2023-45636 WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through = 1.4.1...

5.4CVSS7.3AI score0.00396EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 11:59 a.m.•29 views

CVE-2023-45636 WordPress Backup & Migration plugin <= 1.4.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through = 1.4.1...

5.4CVSS0.00396EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•17 views

PT-2025-1493 · WordPress · Webtoffee Wordpress Backup & Migration

Name of the Vulnerable Software and Affected Versions: WebToffee WordPress Backup & Migration versions 1.4.1 and earlier Description: The issue is related to a missing authorization vulnerability in WebToffee WordPress Backup & Migration, which allows exploiting incorrectly configured access...

5.4CVSS9.4AI score0.00396EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•7 views

CVE-2023-45636: Missing Authorization

Missing Authorization vulnerability in WebToffee WordPress Backup & Migration wp-migration-duplicator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Backup & Migration: from n/a through = 1.4.1...

5.4CVSS5.9AI score0.00396EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/01 12:00 a.m.•16 views

PT-2025-30869

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.15.0-smp-DEV 2 Description The Linux kernel contained a flaw within the KVM component, specifically related to Secure Encrypted Virtualization SEV and Secure Encrypted Virtualization-Encrypted State SEV-ES. The...

7.8CVSS6.5AI score0.00177EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2024/12/30 4:53 a.m.•23 views

CVE-2024-56742

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

6.1CVSS7AI score0.00216EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2024/12/30 3:48 a.m.•12 views

SUSE CVE-2024-56742

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

5.5CVSS7.7AI score0.00216EPSS
SaveExploits0References16
osv_debian
osv_debian
•added 2024/12/29 12:15 p.m.•3 views

DEBIAN-CVE-2024-56742

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

5.5CVSS5.6AI score0.00216EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/12/29 12:15 p.m.•24 views

AZL-55011 CVE-2024-56742 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

5.5CVSS6.1AI score0.00216EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/12/29 12:15 p.m.•22 views

UBUNTU-CVE-2024-56742

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

5.5CVSS6.2AI score0.00216EPSS
SaveExploits0References18
Cvelist
Cvelist
•added 2024/12/29 11:30 a.m.•42 views

CVE-2024-56742 vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix an unwind issue in mlx5vfaddmigrationpages Fix an unwind issue in mlx5vfaddmigrationpages. If a set of pages is allocated but fails to be added to the SG table, they need to be freed to prevent a memory leak. Any...

0.00216EPSS
SaveExploits0References3
Rows per page
Query Builder