PT-2022-15495 · Carlo Gavazzi · Carlo Gavazzi Uwp3.0

Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi UWP3.0 affected versions not specified CPY Car Park Server version 2.8.3 Description: The issue allows a remote attacker with admin rights to execute arbitrary commands due to missing input sanitization in the backup restore...

Build Numbers and Versions of Veeam Plug-In for oVirt KVM

This KB article lists all versions of the Veeam Plug-In for oVirt KVM and their respective appliance build numbers. Starting with Veeam Backup & Replication 12.3, the Release Notes for Veeam Plug-In for oVirt KVM , are included in the Veeam Backup & Replication Release Notes. Note: Prior to versi...

VMware Cloud Director 10.4 Compatibility Patches

Hotfix for Veeam Backup & Replication 11.0.1.1261 P20230227 The hotfix on this article has been rebuilt as of 2023-11-24 to be compatible only with Veeam Backup & Replication build 11.0.1.1261 P20230227. This is the second such rebuild; the last rebuild was on 2023-03-16. Note: If an older versio...

BlackCat Ransomware Attackers Spotted Fine-Tuning Their Malware Arsenal

The BlackCat ransomware crew has been spotted fine-tuning their malware arsenal to fly under the radar and expand their reach. "Among some of the more notable developments has been the use of a new version of the Exmatter data exfiltration tool, and the use of Eamfo, information-stealing malware...

Zero-Day vulnerability in WPGateway Plugin compromises WordPress sites

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The recently uncovered CVE-2022-3180 zero-day vulnerability allows an unauthenticated attacker to add an administrator account to WPGateway-powered websites. WPGateway is a commercial plugin that...

Veritas Backup Exec Agent Remote Code Execution

frozenstringliteral: true This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Veritas Backup Exec Agent Remote Code Execution', 'Description' = %q Veritas Backup Exec Agent supports multiple...

Veritas Backup Exec Agent Remote Code Execution Exploit

Veritas Backup Exec Agent supports multiple authentication schemes and SHA authentication is one of them. This authentication scheme is no longer used within Backup Exec versions, but had not yet been disabled. An attacker could remotely exploit the SHA authentication scheme to gain unauthorized...

CVE-2022-38079

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

CVE-2022-38079

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

CVE-2022-38079

CVE-2022-38079 concerns a Cross-Site Request Forgery (CSRF) in the WordPress Backup Scheduler plugin, versioned

CVE-2022-41320

Veritas System Recovery VSR versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windows user who has sufficient privileges to access a network file system that they were not authorized...

CVE-2022-41320

Veritas System Recovery VSR versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windows user who has sufficient privileges to access a network file system that they were not authorized...

CVE-2022-41320

Veritas System Recovery VSR versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windows user who has sufficient privileges to access a network file system that they were not authorized...

Backup Scheduler <= 1.5.13 - Cross-Site Request Forgery

The plugin does not have CSRF check in some places, which could allow attackers to make logged in users perform unwanted actions...

CVE-2022-38079: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...

PT-2022-24189 · WordPress · Backup Scheduler

Name of the Vulnerable Software and Affected Versions: Backup Scheduler plugin versions = 1.5.13 at WordPress. Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing unintended actions on the web...

WordPress Plugin Backup Scheduler Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...