68 matches found
CVE-2025-4679-SecureOAuth-Demo---Enfoque-educativo
🔐 OAuth 安全实验室：CVE-2025-4679 教育模拟器 一个安全、隔离的环境，用于学习 OAuth 漏洞，无需冒真实系统的风险 🚀 快速开始 | 📚 学习路径 | 🛡️ 安全环境 | 👥 贡献者 📖 概述 本教育实验室模拟了在 Synology 的 Active Backup for Microsoft 365 中发现的 CVE-2025-4679 漏洞 ，该漏洞中客户端密钥在 HTTP 重定向中被暴露。该实验室提供了一个 100% 安全的环境 ，用于理解、分析和学习这一关键安全缺陷。 ⚠️ 重要提示 ：这是一个仅供教育使用的工具...
PT-2026-76674
Just a quick note that I saw a new SABB Active Backup spk posted this morning. Version is 3.2.1-25059 dated 12-Aug-2026. This is one of my most important packages so I'll be checking it out. Changelog Fixed a security vulnerability CVE-2026-15716 Fixed an issue where backing up or restoring Hyper...
CVE-2022-49036: Inclusion of Functionality from Untrusted Control Sphere
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors...
CVE-2025-66592
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation...
CVE-2025-66592
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation...
CVE-2025-66592
CVE-2025-66592 : An origin validation error affects Synology Active Backup for Business Agent prior to version 3.1.0-4967. The flaw allows local users to write arbitrary files with restricted content during installation, indicating a path traversal/origin-check weakness in the installer process. ...
CVE-2025-66592
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation...
EUVD-2025-209962
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content during installation...
Synology Active Backup for Business Agent 访问控制错误漏洞
Synology Active Backup for Business Agent is an enterprise data backup and recovery management platform developed by Synology, a Chinese company. Versions of Synology Active Backup for Business Agent prior to 3.1.0-4967 contained a access control vulnerability caused by a source verification erro...
CVE-2025-66592: Origin Validation Error
An origin validation error vulnerability in Synology Active Backup for Business Agent before 3.1.0-4967 allows local users to write arbitrary files with restricted content and conduct denial-of-service during installation...
Synology Active Backup for Business SQL注入漏洞
Synology Active Backup for Business is an enterprise data backup and recovery management platform provided by the Chinese company Synology. Synology Active Backup for Business has a SQL injection vulnerability, which allows unauthorized remote attackers to read arbitrary files...
EUVD-2023-59631
Malicious code in bioql PyPI...
EUVD-2025-4918
Malicious code in bioql PyPI...
EUVD-2025-4919
Malicious code in bioql PyPI...
EUVD-2023-59634
Malicious code in bioql PyPI...
EUVD-2023-59633
Malicious code in bioql PyPI...
CVE-2025-4679
A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...
CVE-2025-4679
Synology Active Backup for Microsoft 365 (Synology Active Backup for Microsoft 365) is affected by CVE-2025-4679. The issue enables remote authenticated attackers to obtain sensitive information via unspecified vectors, with a high confidentiality impact (C:HIGH, I:N, A:N) and a CVSS 3.1 base sco...
CVE-2025-4679
A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...
PT-2025-21627 · Synology · Synology Active Backup For Microsoft 365
Name of the Vulnerable Software and Affected Versions: Synology Active Backup for Microsoft 365 affected versions not specified Description: A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors...