Discourse security vulnerabilities

Discourse is an open source community discussion platform. The platform includes features such as communities, email and chat rooms. A security vulnerability exists in Discourse. An attacker logged in as an administrator could make multiple requests for backups, which would exhaust all connection...

Quantum DXi Storage With Firmware 3.x Does Not Work with Veeam Backup & Replication 12

Challenge When attempting to add Quantum DXi storage with firmware 3.x to Veeam Backup & Replication, the following error is shown: Failed to StartAgent: Failed to construct ClientAgentProtocol. If the Quantum DXi storage was added to Veeam Backup & Replication prior to upgrading to Veeam Backup ...

MITRE ATT&CK® Mitigations: Thwarting Cloud Threats With Preventative Policies and Controls

As IT infrastructure has become more and more sophisticated, so too have the techniques and tactics used by bad actors to gain access to your environment and sensitive information. That’s why it's essential to implement robust security measures to protect your organization. One way to do this is ...

CVE-2022-34148

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...

CVE-2022-34148

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...

CVE-2022-34148 WordPress Backup Guard Plugin <= 1.6.9.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...

CVE-2022-34148 WordPress Backup Guard Plugin <= 1.6.9.0 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...

CVE-2022-34148

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...

WordPress Backup Bank: WordPress Backup Plugin Plugin <= 4.0.28 is vulnerable to Broken Access Control

Software Backup Bank: WordPress Backup Plugin Type Plugin Vulnerable versions = 4.0.28 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-28165 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 1712eef4d84c Credits...

CVE-2022-34148: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JetBackup JetBackup – WP Backup, Migrate & Restore plugin = 1.6.9.0 versions...

PT-2023-4536 · Zoho · Zoho Manageengine Admanager Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine ADManager Plus versions 7182 and prior Description: The issue is related to insufficient protection of registration data, allowing an attacker to gain unauthorized access to protected information. This can be achieved by...

Security Bulletin: AIX is affected by a denial of service (CVE-2022-45061) due to Python

Summary A vulnerability in Python could allow a remote attacker to cause a denial of service CVE-2022-45061. Python is used by AIX as part of Ansible node management automation. Vulnerability Details CVEID:CVE-2022-45061 DESCRIPTION: Python is vulnerable to a denial of service, caused by an...

Microsoft OneDrive security vulnerabilities

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program has features such as automatic backup of photo albums, online office and file sharing. A security vulnerability exists in Microsoft OneDrive. No information about this vulnerability is available at this time, so stay...

Microsoft OneDrive security vulnerabilities

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program has features such as automatic backup of photo albums, online office and file sharing. A security vulnerability exists in Microsoft OneDrive. No information about this vulnerability is available at this time, so stay...

Microsoft OneDrive security vulnerabilities

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program has features such as automatic backup of photo albums, online office and file sharing. A security vulnerability exists in Microsoft OneDrive. No information about this vulnerability is available at this time, so stay...

Microsoft OneDrive security vulnerabilities

Microsoft OneDrive is a cloud backup application from Microsoft USA. The program has features such as automatic backup of photo albums, online office and file sharing. A security vulnerability exists in Microsoft OneDrive. No information about this vulnerability is available at this time, so stay...

How to Migrate Veeam Backup Enterprise Manager's Database from Microsoft SQL to PostgreSQL

Purpose This article documents the migration of the Veeam Backup Enterprise Manager Enterprise Manager configuration database from Microsoft SQL to PostgreSQL. Notes: The migration process is one-way only. Migration can only be performed from Microsoft SQL to PostgreSQL. Note: Starting in Veeam...

Acronis: IDOR in backup recovery functionality

The vulnerability allowed an authenticated attacker to recover a backup belonging to another user by using the user's machine UUID, backup ID, and other parameters to configure and run a recovery plan...

CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts...

CVE-2023-27532

Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. This may lead to gaining access to the backup infrastructure hosts...