Restore to oVirt KVM VM Post-Restore Recommended Actions

Purpose This article documents recommended post-restore actions that should be taken after restoring VMs, physical machines, and cloud machines to the oVirt KVM hypervisor. Solution Starting in the oVirt KVM Plug-In included with Veeam Backup & Replication 12.3, a feature has been added that allo...

PT-2024-9234 · Sonicwall · Sonicwall Sma100

Name of the Vulnerable Software and Affected Versions: SonicWall SMA100 series affected versions not specified Description: The issue is related to the use of a cryptographically weak pseudo-random number generator PRNG in the SonicWall SMA100 SSLVPN backup code generator. This weakness can be...

PT-2024-31482 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials...

ADC: Unable to delete backup files from GUI

Customer sees 50 backup files on NetScaler GUI whereas same files are not visible on /var/nssysbackup directory. Whenever trying to delete the backup files from GUI it shows "ERROR: Backup file does not exist."...

Acronis Cyber Protect/Backup Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Acronis Cyber Protect/Backup remote code execution', 'Description' = %q Acronis Cyber Protect or Backup is an enterprise backup/recovery solution...

PT-2024-28995 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A vulnerability in Veeam Backup & Replication allows a low-privileged user with certain roles to perform remote code execution RCE by updating existing jobs. These jobs c...

Vulnerabilities Resolved in Veeam Backup & Replication 12.3

All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 12.3. Veeam Product Latest Version Download Page Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operat...

Release Information for Veeam Backup & Replication 12.3

Requirements You can check the installed build number in the Veeam Backup & Replication Console's Main Menu ≡ under Help About. Release Information 12.3.2.4934 2026-10-06 Security Vulnerabilities Indicated severity values are CVSS 4.0 scores. CVE-2026-58069 | Severity: High 8.3 A vulnerability...

"Database connection settings for the Microsoft Entra ID backup repository cannot be found."

If you are encountering this error after recently upgrading to Veeam Backup & Replication 12.3, and that upgrade failed on the first attempt, and you attempted the upgrade a second time, please review the section discussing "For Customers Who Ran the Upgrade a Second Time and It Succeeded" on...

Imperva Defends Against LLM Hacking

In the evolving landscape of cybersecurity, the advent of large language models LLMs has introduced a new frontier of challenges and opportunities. Research has shown advanced LLMs, such as GPT-4, now possess the ability to autonomously execute sophisticated cyberattacks, including blind database...

PT-2024-28796 · Veeam · Veeam Backup Enterprise Manager

Name of the Vulnerable Software and Affected Versions: Veeam Backup Enterprise Manager affected versions not specified Description: A vulnerability has been identified in Veeam Backup Enterprise Manager. Recommendations: At the moment, there is no information about a newer version that contains a...

Virtuozzo Hybrid Infrastructure 6.0 Update 1 Hotfix 11 (6.0.1-112)

This update provides security fixes. Vulnerability id: VSTOR-95697, VSTOR-95700 Security fixes for Backup Gateway...

Virtuozzo Hybrid Infrastructure 6.1 Update 1 Hotfix 9 (6.1.1-64)

This update provides security fixes. Vulnerability id: VSTOR-95697, VSTOR-95700 Security fixes for Backup Gateway...

Virtuozzo Hybrid Infrastructure 6.2 Update 1 Hotfix 4 (6.2.1-71)

This update provides security fixes. Vulnerability id: VSTOR-95697, VSTOR-95700 Security fixes for Backup Gateway...

Virtuozzo Hybrid Infrastructure 6.3 Hotfix 2 (6.3.0-180)

This update provides security fixes. Vulnerability id: VSTOR-95697, VSTOR-95700 Security fixes for Backup Gateway...

Metasploit Weekly Wrap-Up 11/29/2024

New module content 4 Acronis Cyber Protect/Backup machine info disclosure Authors: Sandro Tolksdorf of usd AG. and h00die-gr3y [email protected] Type: Auxiliary Pull request: 19582 contributed by h00die-gr3y Path: gather/acroniscyberprotectmachineinfodisclosure AttackerKB reference:...

MAL-2024-11154 Malicious code in safeness-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19bf25724c16f3c58f6b4af1508806804feda3269370bd50a43eff97e8e580f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in safeness-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19bf25724c16f3c58f6b4af1508806804feda3269370bd50a43eff97e8e580f3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in safeness-backup

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2024-9180 · Jetbrains · Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2024.3.51866 Description: The issue is related to the absence of an authorization procedure when handling a query parameter, allowing an unauthenticated database backup download. This could enable a remote...