22 matches found
CVE-2024-29849
CVE-2024-29849 Bypass de autenticaciĆ³n de Veeam Backup Enterprise Manager CVE-2024-29849 por Sina Kheirkhah @SinSinology de SummoningTeam @SummoningTeam AnĆ”lisis tĆ©cnico Un anĆ”lisis de la causa raĆz de la vulnerabilidad se puede encontrar en mi blog Resumen ĀæVersiones soportadas? SegĆŗn el aviso...
EUVD-2025-29849
Malicious code in bioql PyPI...
CVE-2024-29849: Veeam discloses Critical Vulnerability that allows attackers to bypass user authentication on its Backup Enterprise Manager web interface
On May 21, 2024, Veeam revealed a severe flaw across its Veeam Backup Enterprise Manager VBEM web interface that enables an unauthenticated attacker to log into the web interface as any user. Officially designated as CVE-2024-29849, the vulnerability presents a major threat with a CVSS V3 rating ...
Exploit for Improper Authentication in Veeam Veeam_Backup_\&_Replication
CVE-2024-29849 Veeam Backup Enterprise Manager Authentication...
CVE-2024-29849
Veeam Backup Enterprise Manager allows unauthenticated users to log in as any user to enterprise manager web interface...
Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass
Users of Veeam Backup Enterprise Manager are being urged to update to the latest version following the discovery of a critical security flaw that could permit an adversary to bypass authentication protections. Tracked as CVE-2024-29849 CVSS score: 9.8, the vulnerability could allow an...
CVE-2024-29849
creationtimestamp| type| source ---|---|--- 2024-05-21 22:39:51+00:00| seen| Telegram/mwp7dtTtlex89nyX5drIMj8QdoSROknUbkjAr5Yokmw2dc 2024-05-22 05:51:42+00:00| seen| https://t.me/thehackernews/4991 2024-05-22 06:35:19+00:00| seen| Telegram/M2zvk9-wkuVnST8q4vsVBOGZ1Nehaa4A7PcJEz6MbQ4g 2024-05-22...
Veeam Backup Enterprise Manager Vulnerabilities (CVE-2024-29849, CVE-2024-29850, CVE-2024-29851, CVE-2024-29852)
Veeam Software Security Commitment VeeamĀ® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...
CVE-2023-29849
Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter...
CVE-2023-29849
Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter...
CVE-2023-29849
Bang Resto 1.0 is affected by multiple SQL injection vulnerabilities exploitable through the parameters btnMenuItemID, itemID, itemPrice, menuID, staffID, and itemqty in order-related requests (e.g., staff/displayitem.php). The issue is confirmed across multiple feeds (NVD/Red Hat/Sec databases, ...
CVE-2023-29849
Bang Resto 1.0 was discovered to contain multiple SQL injection vulnerabilities via the btnMenuItemID, itemID, itemPrice, menuID, staffID, or itemqty parameter...
Bang Resto v1.0 - (Multiple) SQL Injection Vulnerability
Exploit Title: Bang Resto v1.0 - 'Multiple' SQL Injection Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Software Link: https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip Version: 1.0 Tested on: Windo...
Bang Resto v1.0 - 'Multiple' SQL Injection
Exploit Title: Bang Resto v1.0 - 'Multiple' SQL Injection Date: 2023-04-02 Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Software Link: https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip Version: 1.0...
CVE-2023-29849
creationtimestamp| type| source ---|---|--- 2023-04-18 17:16:10+00:00| seen| MISP/6fe209e3-4297-4f36-ac92-a5b6db77be5b 2023-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51378 2023-04-24 18:14:25+00:00| seen| https://t.me/cibsecurity/62701 2025-02-06 02:41:37+00:00| seen|...
Bang Resto 1.0 SQL Injection
Exploit Title: Bang Resto v1.0 - 'Multiple' SQL Injection Date: 2023-04-02 Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.hockeycomputindo.com/2021/05/restaurant-pos-source-code-free.html Software Link: https://github.com/mesinkasir/bangresto/archive/refs/heads/main.zip Version: 1.0...
CVE-2022-29849
creationtimestamp| type| source ---|---|--- 2022-05-02 07:27:24+00:00| seen| https://t.me/cibsecurity/41703...
CVE-2022-29849
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system...
CVE-2022-29849
CVE-2022-29849 affects Progress OpenEdge; vulnerable in OpenEdge versions before 11.7.14 and 12.x before 12.2.9 due to privilege-escalation risk from certain SUID binaries. Local attackers could elevate privileges on the affected system. Remediation: upgrade to OpenEdge 11.7.14 or later, or 12.2....
CVE-2022-29849
In Progress OpenEdge before 11.7.14 and 12.x before 12.2.9, certain SUID binaries within the OpenEdge application were susceptible to privilege escalation. If exploited, a local attacker could elevate their privileges and compromise the affected system...