EUVD-2021-7056

Malicious code in bioql PyPI...

EUVD-2025-7809

Malicious code in bioql PyPI...

EUVD-2025-31123

Malicious code in bioql PyPI...

DELL Cloud Disaster Recovery OS Command Injection Vulnerability

DELL Cloud Disaster Recovery is a cloud disaster recovery solution provided by Dell Technologies. DELL Cloud Disaster Recovery suffers from an OS command injection vulnerability that stems from improper neutralization of special elements in OS commands, which can be exploited by an attacker to...

CVE-2025-43943

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with...

CVE-2025-43943

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with...

CVE-2025-43943

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with...

CVE-2025-43943

Dell Cloud Disaster Recovery, versions prior to 19.20, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to execute arbitrary commands with...

CVE-2025-43943

CVE-2025-43943 concerns Dell Cloud Disaster Recovery. Affected: Dell Cloud Disaster Recovery versions prior to 19.20. Issue: Improper Neutralization of Special Elements in OS Commands (OS Command Injection) allowing a high-privilege local attacker to execute arbitrary commands with root privilege...

PT-2025-39410

Name of the Vulnerable Software and Affected Versions Dell Cloud Disaster Recovery versions prior to 19.20 Description Dell Cloud Disaster Recovery contains an Improper Neutralization of Special Elements used in an OS Command, also known as OS Command Injection. A high privileged attacker with...

Dell Cloud Disaster Recovery 操作系统命令注入漏洞

DELL Cloud Disaster Recovery is a cloud disaster recovery solution provided by Dell Technologies. DELL Cloud Disaster Recovery suffers from an OS command injection vulnerability that stems from improper neutralization of special elements in OS commands, which can be exploited by an attacker to...

Migrating Veeam Kasten for Kubernetes to the Red Hat Certified Operators Catalog

Challenge One or more of the following symptoms may be observed in a Red Hat OpenShift environment running Veeam Kasten for Kubernetes : Upgrades are no longer available for the Veeam Kasten operator installed from the Red Hat Operator Marketplace catalog. Veeam Kasten Enterprise - Term or Veeam...

The vulnerability of the software for centralized backup and disaster recovery management in Dell PowerProtect Data Manager lies in the lack of mechanisms for encoding or shielding output data. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Dell PowerProtect Data Manager’s centralized backup and recovery software lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of CommVault’s backup and disaster recovery platform, related to incorrect restrictions on the path to the restricted-access catalog, allows a perpetrator to execute arbitrary code.

The vulnerability of CommVault’s backup and disaster recovery platform lies in the improper limitation of the path name to the restricted-access catalog. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

5 BCDR Essentials for Effective Ransomware Defense

Ransomware has evolved into a deceptive, highly coordinated and dangerously sophisticated threat capable of crippling organizations of any size. Cybercriminals now exploit even legitimate IT tools to infiltrate networks and launch ransomware attacks. In a chilling example, Microsoft recently...

The vulnerability of CommVault’s backup and disaster recovery web server allows a perpetrator to execute arbitrary code.

The vulnerability of CommVault’s backup and disaster recovery web server lies in the deficiencies in the mechanism for verifying input data. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

Dell RecoverPoint for Virtual Machines Command Execution Vulnerability

Dell RecoverPoint for Virtual Machines is a simple, efficient operations and disaster recovery solution from Dell, Inc. A command execution vulnerability exists in Dell RecoverPoint for Virtual Machines. An attacker could use this vulnerability to modify the configuration and gain access to...

Steps to TruRisk™ – 3: Getting Started—Assessing Business Consequences

“In preparing for battle, plans are useless, but planning is indispensable.” —Dwight D. Eisenhower Prioritization wins battles. Preparation is the difference between a coordinated response and total chaos. Protecting what matters starts with identifying critical systems, understanding the impact,...

Product Walkthrough: How Datto BCDR Delivers Unstoppable Business Continuity

Long gone are the days when a simple backup in a data center was enough to keep a business secure. While backups store information, they do not guarantee business continuity during a crisis. With IT disasters far too common and downtime burning through budgets, modern IT environments require...

Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025

As IT environments grow more complex, IT professionals are facing unprecedented pressure to secure business-critical data. With hybrid work the new standard and cloud adoption on the rise, data is increasingly distributed across different environments, providers and locations, expanding the attac...