webERP 4.15.1 - Unauthenticated Backup File Access Vulnerability

Exploit for php platform in category web applications Exploit Title: webERP 4.15.1 - Unauthenticated Backup File Access Author: Besim ALTINOK Vendor Homepage: http://www.weberp.org Software Link: https://sourceforge.net/projects/web-erp/ Version: v4.15.1 Tested on: Xampp Credit: İsmail BOZKURT...

MTN Group: XMLRPC, Enabling XPSA and Bruteforce and DOS + A file disclosing installer-logs.

Summary: XMLRPC+Installerlogs+BackupFilename+Adminusername+disclosure Steps To Reproduce: 1. I was able to successfully exploit XMLRPC with the traditional method, the brute-force was done the username was there in the Installer Logs 2. path to XMLRPC is http://13.92.255.102/xmlrpc.php + the...

Super Backup 2.0.5 for iOS - Directory Traversal Vulnerability

Exploit for iOS platform in category web applications Title: Super Backup 2.0.5 for iOS - Directory Traversal Software: https://apps.apple.com/us/app/super-backup-export-import/id1052684097 CVE: N/A Document Title: =============== Super Backup v2.0.5 iOS - Directory Traversal Vulnerability Produc...

How to Use VSSTrace to Collect VSS Diagnostic Logging

Challenge This article explains how to collect additional VSS diagnostic data with the VSSTrace tool, a Microsoft Windows Software Development Kit SDK component. Cause Veeam products use Microsoft Volume Shadow Copy Service VSS for various tasks. Sometimes it is necessary to go through the...

LG Bridge has an unspecified vulnerability

LG Bridge is a software for backing up, restoring and updating LG cell phones from the South Korean company Luckin LG. The software also supports wireless transfer of files between your computer and your LG cell phone. A security vulnerability exists in versions of LG Bridge prior to 2019-04...

CVE-2020-12478

TeamPass 2.1.27.36 allows an unauthenticated attacker to retrieve files from the TeamPass web root. This may include backups or LDAP debug files...

Tiny File Manager Path Traversal Vulnerability

Tiny File Manager is a web-based open source file manager. A path traversal vulnerability exists in Tiny File Manager. An attacker can use this vulnerability to place a copy of a backup file in a different directory...

Security Bulletin: Android Backup is Allowed (CVE-2019-4288)

Summary IBM Maximo Anywhere allows Android Backup which could result in an attacker being able to copy application information from device. Vulnerability Details CVEID: CVE-2019-4288 DESCRIPTION: IBM Maximo Anywhere could disclose highly senstiive user information to an authenticated user with...

CVE-2020-12103

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files with .bak extension outside the scope in the same directory in which they are stored...

CVE-2020-12103

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files with .bak extension outside the scope in the same directory in which they are stored...

Design/Logic Flaw

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files with .bak extension outside the scope in the same directory in which they are stored...

CVE-2020-12103

In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of files with .bak extension outside the scope in the same directory in which they are stored...

CVE-2020-12103

Tiny File Manager 2.4.1 contains a vulnerability in the ajax file backup copy functionality that allows authenticated users to create backup copies (.bak) outside the intended scope in the same directory. The issue is due to a flaw in the backup copy feature. Remediation suggested in the connecte...

Veeam Backup for Microsoft Azure Recovery/Migration Procedure

This document explains how to recover or migrate Veeam Backup for Microsoft Azure data to new instance.A Veeam Backup for Microsoft Azure instance may fail or get corrupt and requires the data volume...

How to Reset Password in Veeam Plug-In for Microsoft Azure Appliance

Purpose This article documents methods to reset the password of the Veeam Plug-In for Microsoft Azure service account. Solution Reset Password via The Microsoft Azure portal 1. Open the Microsoft Azure portal. 2. Log in using your Microsoft Azure credentials. 3. Select the virtual machine with...

Configuring Multiple Azure Active Directories

Challenge There are different ways to back up VMs from different tenants/subscriptions in Veeam Backup for Microsoft Azure. Multiple Microsoft Azure accounts may be added to Veeam Backup for Microsoft Azure. To handle VMs belonging to different accounts, add them as Azure accounts in Veeam Backup...

PT-2020-13035

Name of the Vulnerable Software and Affected Versions Tiny File Manager version 2.4.1 Description The issue allows authenticated users to create backup copies of files with a .bak extension outside the intended scope in the same directory where they are stored. This is due to a vulnerability in t...

CVE-2020-10997

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...

CVE-2020-10997

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...

CVE-2020-10997

Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONASCHEMA.xtrabackuphistory table...