CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

CVE-2025-63601

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

PT-2025-45120

Name of the Vulnerable Software and Affected Versions Snipe-IT versions prior to 8.3.3 Description An authenticated attacker can execute system commands by uploading a malicious backup file containing arbitrary files. The issue is a remote code execution that allows for arbitrary file uploads and...

CVE-2025-63601: Unrestricted Upload of File with Dangerous Type

Snipe-IT before version 8.3.3 contains a remote code execution vulnerability that allows an authenticated attacker to upload a malicious backup file containing arbitrary files and execute system commands...

PT-2025-53741

Name of the Vulnerable Software and Affected Versions Sprecher SPRECON-E affected versions not specified Description An issue exists in the SSM Sprecher Storage Manager backup function of the Sprecher SPRECON-E automation module firmware due to insufficient protection of service data. This could...

Command Injection

Overview dar-backup is an A script to do full, differential and incremental backups using dar. Some files are restored from the backups during verification, after which par2 redundancy files are created. The script also has a cleanup feature to remove old backups and par2 files. Affected versions...

CVE-2025-48984

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

CVE-2025-8850

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication 2FA flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend do...

EUVD-2025-37232

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

EUVD-2025-37229

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

CVE-2025-48984

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

CVE-2025-48984

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

CVE-2025-48983

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication that originates from remote code execution by an authenticated domain user...

CVE-2025-48984: Improper Control of Generation of Code

A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...

CVE-2025-48983: Improper Access Control

A vulnerability in the Mount service of Veeam Backup & Replication, which allows for remote code execution RCE on the Backup infrastructure hosts by an authenticated domain user...

Veeam Backup & Replication 安全漏洞

Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication that stems from a flaw in the Mount service that could lead to remote code execution...

CVE-2025-48983

CVE-2025-48983 affects Veeam Backup & Replication, specifically the Mount service, enabling remote code execution on Backup infrastructure hosts via an authenticated domain user. The vulnerability is documented across multiple feeds (NVD/NCSC/Red Hat/ENISA/CVE lists) with a high CVSS3.1 base scor...