277 matches found
Veeam Backup & Replication security vulnerabilities
Veeam Backup & Replication is a backup and replication software from Veeam USA. A security vulnerability exists in Veeam Backup & Replication 12.2.0.334 and prior versions 12.X. The vulnerability stems from an insufficient privilege requirement for the method in question, which could lead to...
Veeam Service Provider Console NTLM Authentication Bypass
The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Consoles is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures an...
Syncovery For Linux Web-GUI Session Token Brute-Forcer
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' require 'date' require 'json' require 'metasploit/framework/credentialcollection' require 'metasploit/framework/loginscanner/syncoveryfilesyncbackup'...
Using Veeam Backup Software on Provisioning Services Server
While running Veeam software to backup Provisioning Services PVS servers, one of the PVS servers display status as Down in PVS server console regardless of whether the stream service is running. The following screen shot shows the server status in PVS console. The following screen shot shows the...
MSP360 Security Breach
MSP360 is a cost-effective, flexible and versatile backup and data recovery solution from MSP360, Inc. A security vulnerability exists in MSP360 7.8.5.15 and 7.9.4.84, which stems from the use of hard-coded key encryption and allows an attacker to obtain network share credentials used in backups...
borgmatic: Shell Injection
Background borgmatic is simple, configuration-driven backup software for servers and workstations. Description Prevent shell injection attacks within the PostgreSQL hook, the MongoDB hook, the SQLite hook, the "borgmatic borg" action, and command hook variable/constant interpolation. Impact Shell...
NetApp SnapCenter Authentication Bypass Configuration Change
The vulnerability of the NetApp SnapCenter backup and recovery software platform relates to authentication deficiencies. Exploiting this vulnerability allows a malicious actor to remotely alter the configuration of system logging settings...
Amanda runtar.c Privilege Escalation
The vulnerability of the runtar.c component of the open-source backup software, Advanced Maryland Automatic Network Disk Archiver Amanda, involves the exploitation or modification of arguments. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Vinchin Backup and Recovery Operating System Command Injection Vulnerability
Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. An operating system command injection vulnerability exists in Vinchin Backup and Recovery 7.2 and earlier versions,...
Acronis Agent Information Disclosure
The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain confidential information...
Acronis Agent Link Processing
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to errors in handling links. Exploiting this vulnerability can allow attackers to enhance their privileges...
Acronis Agent Authentication Bypass
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
Acronis Agent Information Disclosure
The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the insufficient protection of registration data. Exploiting this vulnerability can allow attackers to obtain confidential information...
Acronis Agent Privilege Escalation
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
Acronis Agent Uncontrolled Search Path
The vulnerability of backup and data recovery software on computers and servers is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...
Acronis Agent Authentication Bypass
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...
Acronis Agent Privilege Escalation
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
Acronis Agent Privilege Escalation
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
Acronis Agent Privilege Escalation
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to enhance their privileges...
Acronis Agent Authentication Bypass
The vulnerability of backup and data recovery software on computers and servers with Acronis Agent is related to authentication errors. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...