CVE-2025-21199 Azure Agent Installer for Backup and Site Recovery Elevation of Privilege Vulnerability

...

CVE-2025-25747

Cross Site Scripting vulnerability in DigitalDruid HotelDruid v.3.0.7 allows an attacker to execute arbitrary code and obtain sensitive information via the ripristinabackup parameter in the creabackup.php endpoint...

Microsoft Azure 安全漏洞

Microsoft Azure Agent Installer for Backup and Site Recovery provides disaster recovery solutions for local computers and Azure VMs. An elevation of privilege vulnerability exists in Microsoft Azure Agent Installer for Backup and Site Recovery, which can be exploited by an attacker to elevate...

CVE-2024-53695

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

CVE-2025-25763

crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead in /system/SystemDatabackupServices.php...

PT-2025-10436

Name of the Vulnerable Software and Affected Versions Shortcode Cleaner Lite plugin for WordPress versions prior to 1.0.10 Description The issue allows unauthorized access to data due to a missing capability check on the download backup function. This makes it possible for authenticated attackers...

CVE-2024-53695

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

CVE-2024-53695

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

CVE-2024-53695 HBS 3 Hybrid Backup Sync

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

CVE-2024-53695 HBS 3 Hybrid Backup Sync

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

QNAP Systems HBS 3 Hybrid Backup Sync 安全漏洞

QNAP Systems HBS 3 Hybrid Backup Sync is a data management tool that integrates backup, restore and synchronization functions on Weilian's NAS devices, supporting local, remote and cloud storage backups and providing an efficient data protection solution. A buffer overflow vulnerability exists in...

PT-2025-10457

Name of the Vulnerable Software and Affected Versions: DigitalDruid HotelDruid version 3.0.7 Description: The issue allows an attacker to execute arbitrary code and obtain sensitive information. This is achieved via the ripristina backup parameter in the "crea backup.php" endpoint. Recommendation...

PT-2025-10108

Name of the Vulnerable Software and Affected Versions HBS 3 Hybrid Backup Sync versions prior to 25.1.4.952 Description A buffer overflow issue has been reported, which could allow remote attackers to modify memory or crash processes. Recommendations For versions prior to 25.1.4.952, update to...

CVE-2024-53695: Buffer Copy without Checking Size of Input

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later...

CVE-2024-48248

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials...

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2025-27622 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2025-27622...

io.relution.jenkins:scm-sqs (>=1.2, <=1.4), org.jenkins-ci.main:jenkins-test-harness (1.626) +6 more potentially affected by CVE-2025-27624 via org.jenkins-ci.main:jenkins-core (1.626)

org.jenkins-ci.main:jenkins-core MAVEN version 1.626 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - io.relution.jenkins:scm-sqs =1.2, =0.1, =0.2, =0.1, =1.21, =1.24 Source cves: CVE-2025-27624...

PT-2025-9811

Name of the Vulnerable Software and Affected Versions VEDA - MultiPurpose WordPress Theme versions up to, and including, 4.2 Description The VEDA - MultiPurpose WordPress Theme theme for WordPress is vulnerable to PHP Object Injection via deserialization of untrusted input in the veda backup and...

Veeam Backup SSRF

The vulnerability of Veeam Backup’s backup for virtual machines deployed in Microsoft Azure cloud environments is related to insufficient validation of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...

NAKIVO Backup and Replication Disclosure Information

The vulnerability of the web interface of NAKIVO Backup and Replication systems for virtual machines involves access control deficiencies. Exploiting this vulnerability allows an attacker to disclose protected information by sending specially crafted HTTP requests...