Veeam Backup & Replication 10 Cumulative Patch 1

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Please confirm that you are running version 10 build 10.0.0.4461 prior to installing this update. You can check this under Help | About in the Veeam Backu...

Unspecified Vulnerability in Ubiquiti Networks UniFi Video Controller

Ubiquiti Networks UniFi Video Controller is a web application for controlling and managing UniFi video devices from Ubiquiti Networks, Inc. A security vulnerability exists in Ubiquiti Networks UniFi Video Controller v3.9.3 and earlier versions for Windows 7/8/10 x64, which originates in the...

“World’s most secure online backup” provider exposes 135M records

By Waqas “The World’s Most Secure Online Backup” cloud service. leaks secure backup - Oh, the irony. This is a post from HackRead.com Read the original post: "World’s most secure online backup" provider exposes 135M records...

CVE-2020-11449

An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf...

CVE-2020-11449

An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf...

CVE-2020-11449

The CVE-2020-11449 entry applies to Technicolor TC7337 devices running version 8.89.17, where an attacker can extract admin credentials from the backup file (backupsettings.conf). This is the documented vulnerability and impact across multiple feeds; the connected documents confirm the same descr...

Veeam Backup for Microsoft 365 4b cumulative patch KB3119

Challenge Veeam Backup for Microsoft 365 4b cumulative patch KB3119. Please note that Veeam Backup for Microsoft 365 4с is now available and contains all the resolved issues from Veeam Backup for Microsoft 365 4b. Cause Please confirm you are running Veeam Backup for Microsoft 365 4b build...

Unauthorized Access Vulnerability in ZKTime Web Software

ZKTime Web Software is a web-based service management system for ZKTime. An unauthorized access vulnerability exists in ZKTime Web Software, which can be exploited by an attacker to unauthorizedly download a dat backup file containing sensitive database information...

Release Information for Veeam Backup for Nutanix AHV 2.0

This update has been superseded by Veeam Backup for Nutanix AHV 2.1. Requirements Be sure to review the upgrade check list section of the User Guide document closely prior to upgrading as Veeam Backup for Nutanix AHV 2.0 supports integration with Veeam Backup & Replication version 10 and later. Y...

glpi -- Remote Code Execution (RCE) via the backup functionality

MITRE Corporation reports: In GLPI before 9.4.6, an attacker can execute system commands by abusing the backup functionality. Theoretically, this vulnerability can be exploited by an attacker without a valid account by using a CSRF. Due to the difficulty of the exploitation, the attack is only...

Command Execution Vulnerability in Daimi CMS Backend

DAMI CMS is a free open source, fast, simple PC building and mobile building integrated all-in-one system. A command execution vulnerability exists in the backend of Daimi CMS, which can be exploited by an attacker to back up the database and cause a getshell...

Hyper-V Backup Job fails after 72 hours "Failed to call RPC function 'HvSetVmBackupStatus'"

Challenge A backup of a Hyper-V VM fails after 72 hours with the following error: Failed to call RPC function 'HvSetVmBackupStatus': Snapshot with id 'snapshot-uuid' was not found. In the Task log for the specific VM %programdata%\Veeam\Backup\ \Task...log the following error is found: Error The...

All-in-One WP Migration < 7.15 - Arbitrary Backup Download

Lack of randomness in the backup filenames could allow unauthenticated attackers to guess and download them...

WordPress All-in-One WP Migration plugin <= 7.14 - Arbitrary Backup Download vulnerability

Arbitrary Backup Download vulnerability found by Kamil Vavra in WordPress All-in-One WP Migration plugin versions = 7.14. Solution Update the WordPress All-in-One WP Migration plugin to the latest available version at least 7.15...

Veeam Agent backup job configuration fails with "Xml node is not found. Name: [lsObjectRepository]."

Challenge When configuring a Veeam Agent job to target a Veeam Cloud Connect repository, at the Credentials step of the configuration wizard, the following error occurs: Failed to get Cloud Connect repositories, Failed to retrieve the list of available cloud resources from the service provider. X...

[SECURITY] Fedora 31 Update: timeshift-20.03-1.fc31

Timeshift for Linux is an application that provides functionality similar to the System Restore feature in Windows and the Time Machine tool in Mac OS. Timeshift protects your system by taking incremental snapshots of the file system at regular intervals. These snapshots can be restored at a late...

Backup to NFS repository may hang

Challenge After the backup job starts, some task may hang if all of the following conditions are met: The backup repository type is the NFS repository. A Linux server is selected as a gateway server explicitly or it was selected by the automatic selection from options. NFS v3 is used to access th...

Option to Install Veeam ONE Agent is Unavailable (Greyed Out)

Challenge When attempting to install the Veeam ONE Agent on a Veeam Backup Server, theInstall agent option is unavailable and greyed out. Cause There are several possible causes for this issue: The Veeam ONE Agent is already installed on the Veeam Backup & Replication Server. The Veeam ONE Server...

WPvivid Backup < 0.9.36 - Missing Authorization Leading To Database Leak

There is a missing authorization check in the WPvivid Backup plugin that can lead to the exposure of the database and all files of the WordPress site. wpajaxwpvividaddremote does not check if the current user has the proper permission to execute the action to add a new remote backup location, nor...

CVE-2020-10808

Vesta Control Panel VestaCP through 0.9.8-26 allows Command Injection via the schedule/backup Backup Listing Endpoint. The attacker must be able to create a crafted filename on the server, as demonstrated by an FTP session that renames .bashlogout to a .bashlogout' substring followed by shell...