18047 matches found
Using Veeam Agents with Xen Orchestra (Vates XCP-NG and XenServer)
Purpose This article documents how to use Veeam Agent for Microsoft Windows and Veeam Agent for Linux , managed by Veeam Backup & Replication, to protect virtual machines in XenServer and XCP-NG environments that are managed by Xen Orchestra. While these hypervisors are not directly supported for...
Veeam Plug-In for Microsoft Azure Vulnerability - CVE-2025-23082
Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...
PT-2025-4812 · Veeam · Veeam Backup For Microsoft Azure
Name of the Vulnerable Software and Affected Versions: Veeam Backup for Microsoft Azure versions prior to 7.1.0.59 Description: Veeam Backup for Microsoft Azure is vulnerable to Server-Side Request Forgery SSRF. This may allow an unauthenticated attacker to send unauthorized requests from the...
Veeam Backup 代码问题漏洞
Veeam Backup is a backup software from Veeam USA. A code issue vulnerability exists in Veeam Backup versions prior to 7.1.0.59 that stems from vulnerability to server-side request forgery SSRF attacks, which could allow an unauthenticated attacker to send unauthorized requests from the system...
WP SuperBackup Plugin Code Execution
The vulnerability of the ibkrestoremigratecheck function in the Super Backup & Clone plugin for WordPress’ content management system is related to the lack of restrictions on the download of dangerous files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
CVE-2024-47519
Backup uploads to ETM subject to man-in-the-middle interception...
CVE-2024-47519
CVE-2024-47519 is tied to Arista Edge Threat Management – Arista NG Firewall: backup uploads to ETM can be intercepted via a man-in-the-middle. The advisory details the affected product family and versions (NGFW/ETM, 17.1.1 and prior) and provides explicit remediation guidance. The root cause is ...
CVE-2024-47519 Backup uploads to ETM subject to man-in-the-middle interception
Backup uploads to ETM subject to man-in-the-middle interception...
Cross-site Scripting (XSS)
Overview microweber/microweber is a new generation CMS with drag and drop. Affected versions of this package are vulnerable to Cross-site Scripting XSS by an admin user who uploads a malicious backup file using the restore functionality at the /admin/module/view?type=adminbackup endpoint. The...
Microweber Cross-site Scripting vulnerability
Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...
GHSA-W5G5-4JJ3-8F6V Microweber Cross-site Scripting vulnerability
Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...
CVE-2024-33298
Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...
CVE-2024-54910
Hasleo Backup Suite Free v4.9.4 and before is vulnerable to Insecure Permissions via the File recovery function...
CVE-2024-33298
Microweber versions
CVE-2024-54910
Hasleo Backup Suite Free (version 4.9.4 and before ) is vulnerable to Insecure Permissions within the File recovery function. This flaw allows a low-privileged user to perform arbitrary file writes by creating a symbolic link in a directory they control (e.g., C:/) and then using the recovery too...
PT-2025-2770
Name of the Vulnerable Software and Affected Versions: ETM affected versions not specified Description: The issue concerns a man-in-the-middle vulnerability in ETM backup uploads. This allows an attacker to intercept backup uploads to ETM. Recommendations: At the moment, there is no information...
CVE-2024-33298: Improper Neutralization of Input During Web Page Generation
Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...
CVE-2024-33298
Microweber Cross Site Scripting vulnerability in Microweber v.2.0.9 allows a remote attacker to execute arbitrary code via the create new backup function in the endpoint /admin/module/view?type=adminbackup...
Hasleo Backup Suite Free 安全漏洞
Hasleo Backup Suite Free EasyUEFI Backup Suite Free is a completely free Windows backup software from Hasleo. A security vulnerability exists in Hasleo Backup Suite Free v4.9.4 and earlier versions, which stems from the vulnerability to unsecured privileges through the file recovery feature...