Vembu BDR Suite Command Injection Vulnerability

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that arises from a network system or product that does not properly filter specific elements of externally entered data during the construction of an executable command. An attacker...

Vembu BDR Suite Command Injection Vulnerability (CNVD-2021-40767)

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that originates from allowing unauthenticated remote code execution by placing a command in a GET request. No detailed vulnerability details are provided at this time...

Vembu BDR Suite Code Issue Vulnerability (CNVD-2021-50574)

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite, which can be exploited by an attacker to write an unauthenticated file via a GET request that specifies the name and content of the file...

Vembu BDR Suite Code Issue Vulnerability

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite that stems from allowing unauthenticated SSRF via a GET request that specifies a hostname and port number.No detailed vulnerability details are available at this time...

CVE-2021-26474

Various Vembu products allow an attacker to execute a non-blind http-only Cross Site Request Forgery Other products or versions of products in this family may be affected too...

CVE-2021-26472

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges...

CVE-2021-26474

Various Vembu products allow an attacker to execute a non-blind http-only Cross Site Request Forgery Other products or versions of products in this family may be affected too...

CVE-2021-26471

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebserviceo.php accepts a command argument. Using this command argument an unauthenticated attacker can execute arbitrary shell commands...

CVE-2021-26474

Various Vembu products allow an attacker to execute a non-blind http-only Cross Site Request Forgery Other products or versions of products in this family may be affected too...

Cross site request forgery (csrf)

Various Vembu products allow an attacker to execute a non-blind http-only Cross Site Request Forgery Other products or versions of products in this family may be affected too...

CVE-2021-26472

In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /consumerweb/secure/download.php. Using this command argument an unauthenticated attacker can execute arbitrary OS commands with SYSTEM privileges...

CVE-2021-26474 UNAUTHENTICATED SERVER SIDE REQUEST FORGERY IN VEMBU PRODUCTS

Various Vembu products allow an attacker to execute a non-blind http-only Cross Site Request Forgery Other products or versions of products in this family may be affected too...

CVE-2021-26474

CVE-2021-26474 affects Vembu BDR Suite. Connected CNVD/CNVD-like entries indicate a code issue allowing unauthenticated SSRF via a GET request that specifies a hostname and port number. This constitutes an SSRF vulnerability in Vembu BDR Suite’s handling of certain GET requests, enabling an attac...

Vembu BDR Suite 跨站请求伪造漏洞

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite that stems from allowing unauthenticated SSRF via a GET request that specifies a hostname and port number.No detailed vulnerability details are available at this time...

Vembu BDR Suite 操作系统命令注入漏洞

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that arises from a network system or product that does not properly filter specific elements of externally entered data during the construction of an executable command. An attacker...

Vembu BDR Suite 代码问题漏洞

Vembu BDR Suite is a virtual machine management system. A code issue vulnerability exists in Vembu BDR Suite, which can be exploited by an attacker to write an unauthenticated file via a GET request that specifies the name and content of the file...

Vembu BDR Suite 命令注入漏洞

Vembu BDR Suite is a virtual machine management system. A command injection vulnerability exists in Vembu BDR Suite that originates from allowing unauthenticated remote code execution by placing a command in a GET request. No detailed vulnerability details are provided at this time...

CVE-2021-26474: Cross-Site Request Forgery (CSRF)

Various Vembu products allow an attacker to execute a non-blind http-only Cross Site Request Forgery Other products or versions of products in this family may be affected too...

Vembu BDR 4.2.0.1 U1 - Multiple Unquoted Service Paths Vulnerability

Exploit Title: Vembu BDR 4.2.0.1 U1 - Multiple Unquoted Service Paths Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.vembu.com/ Software Link: https://sg-build-release.s3.amazonaws.com/BDRSuite/V420/4202020051312/VembuBDRBackupServerSetup4201U1GA.exe Version: Version 4.2.0.1 U1...

Vembu BDR 4.2.0.1 U1 Unquoted Service Path

Exploit Title: Vembu BDR 4.2.0.1 U1 - Multiple Unquoted Service Paths Date: 2020-11-6 Exploit Author: Mohammed Alshehri Vendor Homepage: https://www.vembu.com/ Software Link: https://sg-build-release.s3.amazonaws.com/BDRSuite/V420/4202020051312/VembuBDRBackupServerSetup4201U1GA.exe Version: Versi...