CVE-2023-0658

A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The...

CVE-2023-0658

A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The...

Design/Logic Flaw

A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The...

PT-2023-16433 · Bdcom · Bdcom 1704-Wgl

Name of the Vulnerable Software and Affected Versions: BDCOM 1704-WGL version 2.0.6314 Description: A critical issue affects the Backup File Handler component, specifically an unknown part of the file /param.file.tgz, leading to information disclosure. The attack can be initiated remotely...

BDCOM 1704-WGL information leakage vulnerability

The BDCOM 1704-WGL is a router from BDCOM China. An information disclosure vulnerability exists in the BDCOM 1704-WGL version 2.0.6314, which originates from the file /param.file.tgz in the component Backup File Handler, which is not sufficiently protected for sensitive information and can be...

CVE-2023-0659: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier...

CVE-2023-0658 Multilaser RE057/RE170 Backup File param.file.tgz information disclosure

A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The...

CVE-2023-0658: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability, which was classified as critical, was found in Multilaser RE057 and RE170 2.1/2.2. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The...

PT-2023-16432 · Multilaser · Multilaser Re 170 +1

Name of the Vulnerable Software and Affected Versions: Multilaser RE057 and RE170 versions 2.1/2.2 Description: A critical issue was found in the Backup File Handler component, affecting an unknown part of the file /param.file.tgz. This leads to information disclosure and can be initiated remotel...

Multilaser RE057 and RE170 have vulnerabilities related to information leakage

The Multilaser RE057 and Multilaser RE170 are both a router from Multilaser. An information disclosure vulnerability exists in the Multilaser RE057 and RE170 versions 2.1/2.2 that originates in an unknown portion of the component Backup File Handler, resulting in information disclosure...

VulnCheck KEV: CVE-2022-2551

The Duplicator WordPress plugin before 1.4.7 discloses the url of the a backup to unauthenticated visitors accessing the main installer endpoint of the plugin, if the installer script has been run once by an administrator, allowing download of the full site backup without authenticating...

CVE-2023-22389

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings, which could be read by any user accessing the file...

MAL-2023-384 Malicious code in fca-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a7307e2fcfdfd54a28ef285f8a2b91d3ac27e726313b0d0a1590d06eddea09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in fca-backup

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in fca-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a7307e2fcfdfd54a28ef285f8a2b91d3ac27e726313b0d0a1590d06eddea09f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-22389: Plaintext Storage of a Password

Snap One Wattbox WB-300-IP-3 versions WB10.9a17 and prior store passwords in a plaintext file when the device configuration is exported via Save/Restore–Backup Settings, which could be read by any user accessing the file...

How to Restrict Which Azure Subscriptions Are Accessible to an Azure Compute Account

Purpose This article documents how to restrict which subscriptions will be accessible to an Azure Compute account used by Veeam Backup & Replication. Use Case By default, IAM roles are assigned to a newly created Microsoft Entra ID application on all subscriptions visible to the Microsoft Entra I...

Invalid backup configuration: Team chats backup using protected APIs must the enabled to protect Team chats.

Challenge After upgrading Veeam Backup for Microsoft 365 from v5 to v6a, during the next backup run, or when editing the job or organization, the following error occurs: Invalid backup configuration: Team chats backup using protected APIs must the enabled to protect Team chats. Issue Prevention...

Application-Aware Processing Tasks Fail in a Kerberos-Only Environment After Upgrading to Veeam Backup & Replication 12

Challenge If you use persistent agents for guest OS processing in a Kerberos-only environment, after upgrading to Veeam Backup & Replication 12, some backup jobs may fail with the error: Failed to connect to guest agent, failing over to guest agent through VIX Failed to connect to guest agent...

UBUNTU-CVE-2022-37705

A privilege escalation flaw was found in Amanda 3.5.1 in which the backup user can acquire root privileges. The vulnerable component is the runtar SUID program, which is a wrapper to run /usr/bin/tar with specific arguments that are controllable by the attacker. This program mishandles the...