Exploit for CVE-2021-27876

CVE-2021-27876 Unauthenticated RCE exploit for Veritas Backup...

CVE-2021-27876

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to ga...

CVE-2021-27878

An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to ga...

EUVD-2021-14615

Malware in sbrugna...

EUVD-2002-1105

Malware in sbrugna...

EUVD-2006-1302

Malware in sbrugna...

EUVD-2005-2082

Malware in sbrugna...

EUVD-2021-14614

Malware in sbrugna...

EUVD-2007-5107

Malware in sbrugna...

EUVD-2006-1301

Malware in sbrugna...

EUVD-2005-2053

Malware in sbrugna...

EUVD-2020-23745

Malware in sbrugna...

EUVD-2021-14616

Malware in sbrugna...

EUVD-2024-31385

Malicious code in bioql PyPI...

EUVD-2024-31383

Malicious code in bioql PyPI...

CVE-2021-27877

An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this schem...

CVE-2020-36167

An issue was discovered in the server in Veritas Backup Exec through 16.2, 20.6 before hotfix 298543, and 21.1 before hotfix 657517. On start-up, it loads the OpenSSL library from the Installation folder. This library in turn attempts to load the /usr/local/ssl/openssl.cnf configuration file, whi...

CVE-2024-33673

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. Improper access controls allow for DLL Hijacking in the Windows DLL Search path...

CVE-2024-33671

An issue was discovered in Veritas Backup Exec before 22.2 HotFix 917391. The Backup Exec Deduplication Multi-threaded Streaming Agent can be leveraged to perform arbitrary file deletion on protected files...

Veritas Backup Exec Windows Remote File Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Veritas Backup Exec Windows Remote File Access', 'Description' = %q This module abuses a logic flaw in the Backup Exec Windows Agent to download...