PT-2024-27825 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability, which occurs through the /admin/DeviceReplication endpoint, specifically in the execution range field, and affects all parameters. This cou...

WBSAirback 安全漏洞

WBSAirback is a next generation storage and backup system from WBSAirback. A command injection vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to modify expected commands...

PT-2024-27806 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue involves improper neutralisation of Server-Side Includes SSI through the License endpoint /admin/CDPUsers, which could allow a remote user to execute arbitrary code. Recommendations: For...

PT-2024-27762 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is related to a command injection vulnerability in the operating system, specifically due to improper neutralisation of special elements in Active Directory integration. This allows the...

PT-2024-27814 · White Bear Solutions · Wbsairback

Name of the Vulnerable Software and Affected Versions: White Bear Solutions WBSAirback version 21.02.04 Description: The issue is related to uncontrolled resource consumption, which could be exploited by an attacker to influence the amount of resources consumed by sending multiple command injecti...

PT-2024-27798 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue involves improper neutralisation of Server-Side Includes SSI through S3 disks, specifically at the /admin/DeviceS3 endpoint. This could allow a remote user to execute arbitrary code,...

WBSAirback 安全漏洞

WBSAirback is a next generation storage and backup system from WBSAirback. A code execution vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to execute arbitrary code...

WBSAirback 路径遍历漏洞

WBSAirback is a next generation storage and backup system from WBSAirback. A path traversal vulnerability exists in WBSAirback version 21.02.04, which can be exploited by a low-privileged attacker to download files from the system...

PT-2024-27844 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability that occurs through the /admin/AdvancedSystem endpoint, specifically in the description field, and affects all parameters. This could allow ...

PT-2024-27790 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue involves improper neutralisation of Server-Side Includes SSI through Device Synchronizations at the "/admin/DeviceReplication" API endpoint. This could allow a remote user to execute arbitrar...

PT-2024-27822 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is a stored Cross-Site Scripting XSS vulnerability. It occurs through the /admin/SystemConfiguration endpoint, specifically in the name and free memory limit fields, and the type and password...

WBSAirback 安全漏洞

WBSAirback is a next generation storage and backup system from WBSAirback. A code execution vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to execute arbitrary code...

WBSAirback 安全漏洞

WBSAirback is a next generation storage and backup system from WBSAirback. A code execution vulnerability exists in WBSAirback version 21.02.04, which can be exploited by an attacker to execute arbitrary code...

PT-2024-27765 · Unknown · Wbsairback

Name of the Vulnerable Software and Affected Versions: WBSAirback version 21.02.04 Description: The issue is related to a Cross-Site Request Forgery vulnerability, which could allow an attacker to create a manipulated HTML form to perform privileged actions once it is executed by a privileged use...