veeam-cve-2023-27532-mock

CVE-2023-27532 - Veeam Backup & Replication Vulnerability Vulnerability Description Veeam Backup & Replication contains a vulnerability that allows encrypted credentials stored in the configuration database to be obtained, allowing attackers to access backup infrastructure hosts. Nuclei Template...

CVE-2026-118990

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...

CVE-2026-118990

Versions of CallBackery for Perl before 0.62.0 are vulnerable to a configuration database exposure. The getConfigBlob() function triggers the sqlite3 shell to write a dump to /tmp/cbdump, which is not subsequently removed. Because the file follows the process umask and targets a predictable name,...

CVE-2026-118990 CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...

EUVD-2026-113920

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...

PT-2026-133531

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...

CVE-2026-63725

The CVE describes an authenticated OS command injection in sysPass, where FileBackupService::doBackupFiles() constructs a tar command by directly inserting the config-provided backup path ($this->path) into the shell command without escaping or validation, and passes it to exec(). This path co...

CVE-2026-48190

An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: 7.0.X...

Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication

CVE-2023-27532 - Veeam Backup & Replication Vulnerability...

EUVD-2021-21373

Malware in sbrugna...

EUVD-2019-15714

Malware in sbrugna...

EUVD-2022-43067

Malicious code in bioql PyPI...

EUVD-2025-22075

Malicious code in bioql PyPI...

MB CONNECT LINE mbNET.mini SQL Injection Vulnerability

The mbNET.mini from MB CONNECT LINE is an industrial router designed for industrial scenarios and is primarily used to enable secure remote connections to machines and systems. MB CONNECT LINE mbNET.mini suffers from a SQL injection vulnerability that stems from improper neutralization of special...

CVE-2025-41678

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...

CVE-2025-41678

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...

CVE-2025-41678

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...

CVE-2025-41678

CVE-2025-41678 is described as a SQL injection vulnerability that allows a high-privileged remote attacker to alter the configuration database via POST requests. Connected sources indicate affected devices in the Helmholz Rex100/mbNET.mini family with versions prior to 2.3.3 (fixed in 2.3.3). Mit...

CVE-2025-41678 SQL Injection via POST Requests Allowing Configuration Database Manipulation

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...

CVE-2025-41678 SQL Injection via POST Requests Allowing Configuration Database Manipulation

A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement...