CVE-2020-10416

The way URIs are handled in admin/header.php in Chadha PHPKB Standard Multi-Language 9 allows Reflected XSS injecting arbitrary web script or HTML in admin/kb-backup.php by adding a question mark ? followed by the payload...

Veeam Agent for Microsoft Windows Job Displays the Warning: "Disk is running low on free space"

Challenge A Veeam Agent for Microsoft Windows backup job lists the warning: Disk is running low on free space Copy Log Example C:\ProgramData\Veeam\Endpoint\jobname \Job.jobname.Backup.log Info EpFreeSpaceHelper Volume 'New Volume D:', isSystem=False length is 10718543872 bytes. Free space...

Veeam Backup for Microsoft 365 4a cumulative patch KB3089

Challenge Veeam Backup for Microsoft 365 4a cumulative patch KB3089. Cause Please confirm you are running Veeam Backup for Microsoft 365 4a build 4.0.0.1553 prior to installing this cumulative patch KB3089. You can check this under Help About in Veeam Backup for Microsoft 365 console. After...

h2: Information Exposure due to insecure handling of permissions in the backup

An issue was discovered in H2 1.4.197. Insecure handling of permissions in the backup function allows attackers to read sensitive files outside of their permissions via a symlink to a fake database file...

The vulnerability of the Windows operating system’s backup service allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s backup service is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

VMware Carbon Black Threat Analysis: FTCODE Ransomware

FTCODE is a fully PowerShell-based ransomware. It is distributed via malicious document files that contain macros or using VBScript to download and launch the malicious PowerShell script. FTCODE ransomware will scan a specific list of file extensions and encrypt them with Rijndael algorithm. Othe...

Product release: Virtuozzo Infrastructure Platform 3.5 Update 1 Hotfix 1 (3.5.1-45)

This update provides an important bug fix for Backup Gateway. Vulnerability id: VSTOR-31604 Backup Gateway may be unstable...

List of Security Fixes and Improvements in Veeam Backup & Replication

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Backup & Replication. The goal of this article is to provide our customers' security and compliance teams with detailed information on security improvements between releases, i...

List of Security Fixes and Improvements in Veeam Agent for Linux

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Agent for Linux. The goal of this article is to provide our customers' security and compliance teams with the detailed information on security improvements between releases, in...

How to set up multi-factor authentication (MFA) for Veeam Agent for Microsoft Windows

Article Applicability This article concerns a feature only available in Veeam Agent for Microsoft Windows 5 and older. The option to backup to OneDrive was deprecated in Veeam Agent for Microsoft Windows 6. As an alternative, Veeam Agent for Microsoft Windows 6 has introduced an Object Storage...

Ubiquiti Configuration Importer

This module imports an Ubiquiti device configuration. The db file within the .unf backup is the data file for Unifi. This module can take either the db file or .unf...

WordPress WPvivid Backup and Migration plugin <= 0.9.35 - Missing Authorization vulnerability leading to Database Leak

Missing Authorization vulnerability leading to Database Leak discovered by Dave Jong Patchstack in WordPress WPvivid Backup and Migration plugin versions = 0.9.35. Solution Update the WordPress WPvivid Backup and Migration plugin to the latest available version at least 0.9.36...

Security Bulletin: Multiple vulnerabilities in current releases of the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Netcool Configuration Manager.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Netcool Configuration Manager IP Edition v6.4.1 and v6.4.2, which were disclosed in the Oracle October 2019 Critical Patch Update. Vulnerability Details Refer to the security...

Release Notes for Veeam Backup & Replication 10 Day 0 Update

Challenge This "Day 0" update is intended only for environments where Veeam Backup & Replication 10 RTM 10.0.0.4442 is installed. If you are running Veeam Backup & Replication 10 GA build 10.0.0.4461 or later, this update is not applicable to you, and should be ignored. This update is provided to...

Release Information for Veeam ONE 10

Challenge Release information for Veeam ONE 10. Cause Make sure you are running Veeam ONE version 9.5 updates 3, 4 or 4a builds № 9.5.0.3801, 9.5.4.4566 and 9.5.4.4587 prior to installing this update. You can check this under Help | About in Veeam ONE console. After upgrading, your build will be...

Release Information for Veeam Backup & Replication 10

This version has been superseded by Veeam Backup & Replication 10a. Challenge Release information for Veeam Backup & Replication 10. NOTE : A cumulative hotfix rollup that addresses issues reported by customers on the original build of v10 GA is now available, click here for more information...

Remote Code Execution (RCE)

CloudForms is vulnerable to remote code execution RCE. The vulnerability exists in the NFS schedule backup...

Microsoft Windows Backup Service Elevation of Privilege Vulnerability

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Backup Service, which arises from a program's failure to properly handle operations on files. The vulnerability can ...

CloudForms: RCE vulnerability in NFS schedule backup

A flaw was found in the CloudForms management engine, which triggered remote code execution through NFS schedule backup. An attacker logged into the management console could use this flaw to execute arbitrary shell commands on the CloudForms server as root...

Important: Red Hat Security Advisory: CloudForms 4.7.15 security, bug fix and enhancement update

An update is now available for CloudForms Management Engine 5.10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...