Java Admin Console Root Command Execution

The vulnerability of the Java Admin Console software tools for backup and recovery operations of NetBackup Appliances and NetBackup relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability could allow a malicious actor t...

Exchange Backup Fails With 'SOAP header Action was not understood'

This a known issue that Veeam Software is currently investigating alongside Microsoft Support...

WP Database Backup Plugin for WordPress < 5.9 Stored Cross-Site Scripting

The WordPress WP Database Backup Plugin installed on the remote host is affected by a Stored Cross-Site Scripting. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Veeam Plug-In for Microsoft Azure Worker Size Information

Purpose This article documents information regarding the Veeam Plug-In for Microsoft Azure worker size and configuration. Solution In Veeam Plug-In for Microsoft Azure , worker VMs are responsible for data transfer, including backup and restore operations, maintaining existing backup chains, and...

CVE-2022-41591

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

CVE-2022-41591

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

Path traversal

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 9

Package name: xms10.14.0.10942.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10813.bin, xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and xms10.14.0.10118.bin. Date:...

CVE-2022-41591

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

CVE-2022-41591

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

CVE-2022-41591

The CVE-2022-41591 entry describes a path traversal vulnerability in the backup module of Huawei HarmonyOS. Affected software is HarmonyOS; the root cause is improper handling of file paths in the backup component, enabling an attacker to access unauthorized system files. Publicly available refer...

PT-2022-25966

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The backup module has a path traversal vulnerability, which can be exploited to gain unauthorized access to other system files on the system. Recommendations At the moment, there is n...

Virtuozzo Hybrid Infrastructure 5.3 Update 1.1 (5.3.1-41)

This update enables a new scenario for VPN as a service and provides important stability fixes. Vulnerability id: VSTOR-60216, VSTOR-61366 Stability issues for the storage and Backup Gateway services...

Veeam Backup and Replication Multiple Vulnerabilities (KB4288)

The version of Veeam Backup and Replication installed on the remote Windows host is a version prior to 10.0.1.4854 P20220304 or prior to 11.0.1.1261 P20220302 or prior to. It is, therefore, affected by multiple vulnerabilities: - Improper limitation of path names in Veeam Backup & Replication...

Veeam Backup And Replication Installed (Windows)

Binary data veeambackupandreplicationwininstalled.nbin...

PT-2022-17905 · Undefined · Undefined

ParsedReport 19-12-2022 Veeam Fixes Critical Vulnerabilities in Backup & Replication Software CVE-2022-26500 & CVE-2022-26501 https://socradar.io/veeam-fixes-critical-vulnerabilities-in-backup-replication-software-cve-2022-26500-cve-2022-26501 Threats: Monti Yanluowang Empire loader CVEs:...

Virtuozzo Hybrid Server 7.5 Update 4 (7.5.4-465)

Virtuozzo Hybrid Server 7.5 Update 4 introduces new features and provides stability and usability bug fixes. It also introduces a new kernel 3.10.0-1160.80.1.vz7.191.4. Vulnerability id: PSBM-142718 Node IP was not set when changing 'vnclisten' in '/etc/libvirt/qemu.conf.' Vulnerability id:...

CISA Alert: Veeam Backup and Replication Vulnerabilities Being Exploited in Attacks

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two vulnerabilities impacting Veeam Backup & Replication software to its Known Exploited Vulnerabilities KEV Catalog, citing evidence of active exploitation in the wild. The now-patched critical flaws, tracked as...

Feature Deprecation: "Transform previous backup chains into rollbacks"

Prepare for Veeam Backup & Replication 12 This article concerns a feature that will be fully deprecated in Veeam Backup & Replication 12. This article documents how to identify if this feature is in use and how to phase out this feature to ensure the existing Veeam Backup & Replication deployment...

Syncovery For Linux Web-GUI Authenticated Remote Command Execution Exploit

This Metasploit module exploits an authenticated command injection vulnerability in the Web GUI of Syncovery File Sync and Backup Software for Linux. Successful exploitation results in remote code execution under the context of the root user. Syncovery allows an authenticated user to create jobs,...