CVE-2021-27876

CVE-2021-27876 Nicht authentifizierter RCE-Exploit für den Veritas Backup Exec Agent CVE-2021-27876/77/78 — SHA-Authentifizierungsumgehung zu SYSTEM über NDMP CVEs CVE| Beschreibung| CVSS 3.1 ---|---|--- CVE-2021-27876| Authentifizierungsumgehung durch SHA-Hash-Manipulation im NDMP-Protokoll| 9.8...

CVE-2021-27877-PoC

CVE-2021-27877 Prova di concetto Questo repository contiene una versione modificata del modulo Metasploit originale di Rapid7 per CVE-2021-27877 che interessa l'agente Veritas Backup Exec. Durante i miei test, il modulo Metasploit originale identificava correttamente il target come vulnerabile, m...

EUVD-2018-11836

Malware in sbrugna...

EUVD-2011-0564

Malware in sbrugna...

EUVD-2015-4937

Malware in sbrugna...

EUVD-2013-4531

Malware in sbrugna...

EUVD-2022-48020

Malicious code in bioql PyPI...

CVE-2013-4678

The NDMP protocol implementation in Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 allows remote authenticated users to obtain sensitive host-version information via unspecified vectors...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

Code injection

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise...

CVE-2022-45099

Dell PowerScale OneFS (versions 8.2.x–9.4.x) contains a weak encoding for the NDMP password. This local, privileged-access vulnerability could allow a full system compromise. Mitigations from PT-2022-6324 include disabling the NDMP password feature until a patch is available, restricting privileg...

Veritas Backup Exec Remote Agent Detection Consolidation

Consolidation of Veritas Backup Exec Remote Agent detections. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc";...

Network Data Management Protocol (NDMP) Detection

A NDMP Service is running at this host. NDMP is used primarily for backup of network-attached storage NAS devices, such as storage systems. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

NetApp Data ONTAP Detection Consolidation

Consolidation of NetApp Data ONTAP detections. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

CVE-2018-1202

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or...

CVE-2018-1202

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or...

Cross site scripting

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or...

CVE-2018-1202

Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the NDMP Page within the OneFS web administration interface. A malicious administrator may potentially inject arbitrary HTML or...