CVE-2024-29849

CVE-2024-29849 Обход аутентификации Veeam Backup Enterprise Manager CVE-2024-29849 от Sina Kheirkhah @SinSinology из SummoningTeam @SummoningTeam Технический анализ Анализ первопричины уязвимости можно найти в моём блоге Краткое описание Поддерживаемые версии? Согласно официальному бюллетеню Veea...

CVE-2023-27532

CVE-2023-27532 POC для CVE-2023-27532, затрагивающий Veeam Backup and Replication Технический анализ Технический анализ первопричины уязвимости можно найти в нашем блоге: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Краткое описание Этот POC использует незащищенну...

CVE-2026-44963

CVE-2026-44963 — Удаленное выполнение кода в Veeam Backup & Replication Исследовательский репозиторий отSentinelX — только для авторизованного тестирования безопасности и защитных целей. Обзор Поле| Детали ---|--- CVE ID| CVE-2026-44963 Вендор| Veeam Продукт| Backup & Replication Затронутые верси...

CVE-2023-27532-RCE-Only

Форкнутая версия только RCE Форкнутый репозиторий, удалена часть утечки учётных данных. Применены исправления для компиляции. CVE-2023-27532 Образец эксплойта для CVE-2023-27532, позволяющий либо извлечь учётные данные в открытом виде, либо выполнить удалённую команду. Обзор Подробный анализ...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

CVE-2023-27532

CVE-2023-27532 Proof of Concept код для эксплуатации CVE-2023-27532, позволяющий либо получить учётные данные в открытом виде, либо удалённо выполнить произвольную команду. Обзор Подробный анализ уязвимости и методов её эксплуатации представлен в анализе Rapid7 на AttackerKB. Сборка Откройте прое...

CVE-2024-40711-Exp

Usos root@kitploit: .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" root@kitploit: Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE La dirección IP objetivo de Veeam Backup and Replication --vp,...

veeam-velociraptor

Veeam Backup & Replication Velociraptor 아티팩트 - PoC 이 저장소에는 원격 Veeam Backup & Replication 포렌식 파이프라인을 위한 개념 증명PoC 역할을 하는 Velociraptor 아티팩트 모음이 포함되어 있습니다: artifacts/에는 아티팩트 정의가 포함되어 있습니다 tools/에는 Windows.QEMU.ImgConvert와 함께 사용할 수 있는 qemu-img.zip 아카이브가 포함되어 있습니다 자세한 내용은 관련 블로그 게시물에서 확인할 수 있습니다:...

CVE-2024-40711

CVE-2024-40711 Эксплойт для Veeam backup and Replication: Pre-Auth Deserialization CVE-2024-40711 Технические детали см. в нашем посте в блоге https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC в действии root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Vee...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Уязвимость Veeam Backup & Replication Описание уязвимости Veeam Backup & Replication содержит уязвимость, которая позволяет получить зашифрованные учетные данные, хранящиеся в базе данных конфигурации, что позволяет злоумышленникам получить доступ к хостам резервной инфраструктур...

VeeamDumper-BOF

Veeam Dumper BOF Veeam Backup and Replication 및 Veeam One용 자격 증명 추출 BOF로, @MWRCyberSec의 Stephen Munro와 Logan Kroeger가 제작했습니다. 이 BOF는 Veeam One 또는 Veeam Backup and Replication 서버의 Admin 비콘에서 실행해야 하며 Cobalt Strike 및 Outflank C2를 지원합니다. root@kitploit: tldr; The BOF uses sqlcmd.exe/psql.exe to extrac...

Vulnerability Resolved in Veeam Backup & Replication 13.1

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Release Information for NetApp ONTAP Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing NetApp ONTAP Plug-In v2.0.14, ensure that you are running at least Veeam Backup &...

How to Apply Custom Settings in Veeam Backup for Microsoft 365 Using Set-VBOConfigurationParameter

Purpose This article explains how to use the Set-VBOConfigurationParameter cmdlet to apply a custom configuration setting within a Veeam Backup for Microsoft 365 deployment. Solution How the Scripts in This Article Are Used Every script in this article begins with the same three variables, which...

How to Export Veeam Backup for Salesforce Data to Cloud or Local Storage

This article was updated on 2026-08-21 to document the new vbsf-export 1.0.0-27, which introduces support for export to local storage in addition to the previous cloud-only destinations. Purpose This article covers vbsf-export, a standalone utility that exports Salesforce backup data from a Veeam...

How to Identify and Repair Files That Cannot Be Opened After Restore

Purpose This article provides steps to identify and repair SharePoint, OneDrive, Teams files, and list attachments that were backed up with corrupted content due to the issue described in KB4835. Note: These instructions apply only to non-immutable object storage repositories that contain backups...

Veeam Backup & Replication’s vulnerability handling capabilities

Veeam has identified a vulnerability in Backup & Replication. This vulnerability allows an authenticated domain user to execute remote code on the Backup Server. As a result, an attacker with domain credentials can exploit this vulnerability to gain control over backup operations. This is a...

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution. Tracked as CVE-2026-44963 , the vulnerability carries a CVSS score of 9.4 out of a maximum of 10.0. "A vulnerability allowing remote code execution RCE o...

Vulnerability Resolved in Veeam Backup & Replication 12.3.2.4854

All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 12.3.2.4854. This vulnerability does not affect any version 13.x build of Veeam Backup & Replication due to architectural changes starting in version 13. Veeam Software Security Commitment Veeam® is committ...

Veeam Backup and Replication < 12.3.2.4854 (kb4869)

The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4869 advisory. - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...