CVE-2023-6505 Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure

The Migrate WordPress Website & Backups WordPress plugin before 1.9.3 does not prevent directory listing in sensitive directories containing export files...

Prime Mover < 1.9.3 - Directory Listing to Sensitive Data Exposure

Description The plugin does not prevent directory listing in sensitive directories containing export files. http://127.0.0.1/wordpress/wp-content/uploads/prime-mover-export-files/1/ 0 Go to packages and crate new If there is no backup now 1 Go to this URL manualy 2 Use Exploit...

alsaad-mover.com Cross Site Scripting vulnerability OBB-3303148

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2012-3191

Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.50, 8.51, and 8.52 allows remote authenticated users to affect availability via unknown vectors related to Data Mover...

Adding Linux Server Without Elevation: "Installing Installer service Error"

Challenge When adding a Linux Server to Veeam Backup & Replication using a non-root account and not enabling the "Elevate account privileges automatically" option, the following error is shown: RPM-based Linux distributions Installing Installer service Error: Error: error: can't create transactio...

Malicious code in azure-arm-resourcemover-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66f9357c207a31225a24735bdcfd23e802760ee71fc071cfe94158668c62076b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-resourcemover-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 329c777bc395bc11bfd51e112a8ac35155dde42b9911add8bd5536c54ea05669 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

How to Reinstall the Veeam Transport Service on a Linux Server

Article Use The steps outlined in this article are used as a troubleshooting step when an issue occurs with a Customer-deployed Linux server, and the Veeam Transport service needs to be manually reinstalled. When phasing out a Linux server, these steps are not necessary; In such a scenario, simpl...

Installing Veeam Data Mover service Error: scp: error: unexpected filename:

Challenge When adding a Linux server to Veeam Backup & Replication, the New Linux Server wizard displays the error: Installing Veeam Data Mover service Error: scp: error: unexpected filename: Copy Log Example C:\ProgramData\Veeam\Backup\Utils\Util.InfraItemSaver.log Info Uploading file to...

WordPress Migrate WordPress Website & Backups – Prime Mover plugin <= 1.4.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Migrate WordPress Website & Backups – Prime Mover plugin versions = 1.4.9. Solution Update the WordPress Migrate WordPress Website & Backups – Prime Mover plugin to the latest available version at leas...

U.S. Dept Of Defense: ██████ Authenticated User Data Disclosure

Background The Air Force’s ███ application is exposing members’ personal information to other users with access to the applocaton. We’ve identified two specific issues, but there may be other similar problems in the same vein as the ones described here. The underlying problem appears to be that...

Solaris 10 (x86) : 150313-06

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: iSCSI Data MoverIDM. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability...

The vulnerability of the datamover module of the Linux operating system-based backup software NovaBACKUP allows a hacker to execute arbitrary commands.

The vulnerability of the datamover module of the Linux operating system-based NovaBACKUP data center backup software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

Oracle WebCenter Sites Unauthorized Operation Vulnerability

Oracle Fusion Middleware is a suite of business innovation platforms for enterprise and cloud environments from Oracle Corporation. Oracle WebCenter Sites is a web experience management component that enables marketers and business users to create and manage interactive social online experiences ...

CVE-2017-3591

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTT...

CVE-2017-3554

Vulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware subcomponent: Catalog Mover. Supported versions that are affected are 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP...

CVE-2017-3591

CVE-2017-3591 affects Oracle WebCenter Sites (Oracle Fusion Middleware) in the Catalog Mover subcomponent. Affects listed versions: 11.1.1.8.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. The vulnerability can be exploited by an unauthenticated remote attacker over HTTP, with user interaction required...

CVE-2015-4366

Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mover module 6.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-4366

CVE-2015-4366 affects Drupal’s contributed Mover module (6.x-1.0). The issue stems from insufficient sanitization of user-supplied text in certain pages, enabling Cross-Site Scripting (XSS) by remote authenticated users who have permissions to create/edit nodes. No exploit details provided beyond...