46 matches found
BackupOperatorToolkit
BackupOperatorToolkit 使用方法 BackupOperatorToolkit BOT には、バックアップオペレーターからドメイン管理者に昇格できる4つの異なるモードがあります。 ツールを実行する前に、"runas.exe /netonly /user:domain.dk\backupoperator powershell.exe" を使用してください。 サービスモード SERVICEモードは、リモートホストにサービスを作成し、ホストが再起動されたときに実行されます。...
CVE-2025-59470-PostgreSQL-Command-Injection
Affected Software: PostgreSQL 15.x before 15.7, 16.x before 16.3. Vulnerability Type: Command injection in the pgbackup extension. Description: The pgbackup extension fails to properly sanitize user‑supplied parameters, allowing a backup operator to inject arbitrary commands that are executed as...
backup_dc_registry
备份操作员注册表备份导致域沦陷 一个简单的 POC，利用备份操作员权限远程转储 SAM、SYSTEM 和 SECURITY 注册表配置单元。 研究致谢： @filipdragovic 移植自 @mpgn 的 Windows PoC 用法 该概念验证是 impacket/examples/reg.py 的修改版本，可与已安装的最新 impacket 版本配合使用。所有受支持的 impacket 认证机制均可用。 root@kitploit: root@kali: python3 reg.py jsmith:'Spring2021'@10.0.229.1 backup -p...
CVE-2026-66800
A flaw was found in cluster-backup-operator. A namespace administrator with privileges in the open-cluster-management-backup namespace can exploit a feature in the Restore Custom Resource CR. By setting the cleanupBeforeRestore field to CleanupAll, an attacker can trigger an unguarded, cluster-wi...
CVE-2026-66797
A flaw was found in the cluster-backup-operator. An attacker with write access to the backup storage location or the ability to create a Velero Backup object can inject malicious Role-Based Access Control RBAC resources into a backup. When this tampered backup is restored, the operator processes...
CVE-2026-66799
A flaw was found in the cluster-backup-operator. A privileged user with administrative access to a specific namespace could exploit a vulnerability in the backup restoration process. This flaw allows them to redirect sensitive information, such as cloud provider credentials and access tokens, fro...
CVE-2026-66798
A flaw was found in cluster-backup-operator. A namespace administrator in open-cluster-management-backup can create a Restore Custom Resource CR with malicious hooks. These hooks allow the execution of arbitrary commands within any matching restored pod, leading to the exfiltration of...
GO-2026-4591 Rancher Backup Operator pod's logs leak S3 tokens in github.com/rancher/backup-restore-operator
Rancher Backup Operator pod's logs leak S3 tokens in github.com/rancher/backup-restore-operator. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerabili...
CVE-2025-62879
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs...
CVE-2025-62879
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs...
CVE-2025-62879
Technical details about CVE-2025-62879 (Rancher Backup Operator token leakage) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.
CVE-2025-62879 Rancher Backup Operator pod's logs leak S3 tokens
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs...
CVE-2025-62879
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs...
CVE-2025-62879 Rancher Backup Operator pod's logs leak S3 tokens
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs...
CVE-2025-62879 Rancher Backup Operator pod's logs leak S3 tokens
A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs...
GHSA-WJ3P-5H3X-C74Q Rancher Backup Operator pod's logs leak S3 tokens
Impact A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs. Specifically, the S3 accessKey and secretKey are exposed in the pod's logs under the following logging lev...
Rancher Backup Operator pod's logs leak S3 tokens
Impact A vulnerability has been identified within the Rancher Backup Operator, resulting in the leakage of S3 tokens both accessKey and secretKey into the rancher-backup-operator pod's logs. Specifically, the S3 accessKey and secretKey are exposed in the pod's logs under the following logging lev...
PT-2026-22925
Name of the Vulnerable Software and Affected Versions Rancher Backup Operator versions prior to 108.0.1+up9.0.1 Rancher Backup Operator versions prior to 107.1.2+up8.1.2 Rancher Backup Operator versions prior to 106.0.6+up7.0.5 Rancher Backup Operator versions prior to 105.0.6+up6.0.3 Description...