Shihonkanri Plus Path Traversal Vulnerability

Ekakin Shihonkanri Plus GOOUT is a CGI Public Gateway Interface from Ekakin Japan. A path traversal vulnerability exists in Shihonkanri Plus Ver9.0.3 and earlier versions that could allow a local attacker to execute arbitrary code by allowing a legitimate user to import a specially crafted produc...

Cloud Backup "Inner SQL exception in the service provider infrastructure"

The error documented in this article can occur due to various reasons. This article specifically addresses a single scenario related to the underlying SQL database engine used by the Veeam Cloud Service Provider. The log snippet provided in the 'Cause' section offers context to help confirm wheth...

Acronis Cyber Protect Security Vulnerability

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A security...

PT-2023-28777 · Proxmox · Proxmox Ve +2

Name of the Vulnerable Software and Affected Versions: Proxmox VE versions 5.4 through 8.0 Proxmox Backup Server versions 1.1 through 3.0 Proxmox Mail Gateway versions 7.1 through 8.0 Description: An issue in Proxmox products allows a remote authenticated attacker to escalate privileges via...

Proxmox Virtual Environment Security Vulnerability

Proxmox Virtual Environment Proxmox VE is an open source server virtualization environment Linux distribution from Proxmox. A security vulnerability in Proxmox Server Solutions GmbH Proxmox VE v.5.4 to v.8.0, Proxmox Backup Server v.1.1 to v.3.0, and Proxmox Mail Gateway v.7.1 to v.8.0 has been...

'Unauthorized to make an AWS request.' When Using AWS Israel Region

Challenge When creating a new AWS S3 Object Storage Repository with the recently launched AWS Israel region il-central-1, configuring a Helper Appliance fails with the error: Unauthorized to make an AWS request. Cause This error occurs because the AWS SDK libraries used by Veeam Backup &...

CVE-2023-41335

CVE-2023-41335 affects the Synapse Matrix homeserver. When users update passwords, the new credentials may be briefly held in the server’s database, potentially ending up in backups longer than expected. The issue does not grant new capabilities but violates expectations around password storage. ...

WordPress WPvivid Backup and Migration Plugin <= 0.9.89 is vulnerable to Arbitrary File Deletion

Software WPvivid Backup and Migration Type Plugin Vulnerable versions = 0.9.89 Fixed in 0.9.90 OWASP Top 10 A5: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2023-4274 Patch priority Low CVSS severity Low 8.7 Developer Claim ownership PSID 578242027a0b Credits Ivan...

WordPress WPvivid Backup and Migration Plugin <= 0.9.89 is vulnerable to Cross Site Scripting (XSS)

Software WPvivid Backup and Migration Type Plugin Vulnerable versions = 0.9.89 Fixed in 0.9.90 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-5121 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID e1420d6f67a7 Credits Ivan...

PT-2023-9459 · D Link · D-Link Dar-7000

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 up to 20240912 Description: A critical vulnerability has been found in the file /view/DBManage/Backup Server commit.php, allowing for os command injection through the manipulation of the host argument. This issue can be...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its authentication procedures’ flaws, which allow attackers to access confidential information.

The vulnerability of backup and data recovery software on computers and servers related to Acronis Agent lies in the flaws in the authentication process. Exploiting this vulnerability can allow attackers to access confidential information...

Rescan of Windows Machine in Protection Group Fails With "The network path was not found."

Article Applicability This article addresses situations in which credential-based authentication is used to add a Windows machine to a Veeam Agent for Microsoft Windows protection group. The troubleshooting steps below address connectivity failures that occur when Veeam Backup & Replication...

CVE-2023-43478

fakeupload.cgi on the Telstra Smart Modem Gen 2 Arcadyan LH1000, firmware versions 0.18.15r, allows unauthenticated attackers to upload firmware images and configuration backups, which could allow them to alter the firmware or the configuration on the device, ultimately leading to code execution ...

Veeam Backup for Google Cloud Backup Stuck at 0%

Challenge Backup policies in Veeam Backup for Google Cloud are stuck at 0% progress. Cause This situation is caused by Google recently updating the latest Ubuntu Linux machine image available in their cloud to ubuntu-2204-jammy-v20230829. The existing worker VM methods utilized in Veeam Backup fo...

PT-2023-7768 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the backup xi.sh script in Nagios XI, which is vulnerable due to uncontrolled recursion when processing the name and rootdir parameters. This could allow a remote...

Fedora: Security Advisory for borgbackup (FEDORA-2023-34411d8f77)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for borgbackup (FEDORA-2023-555f9fac30)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: borgbackup-1.2.6-1.fc38

BorgBackup short: Borg is a deduplicating backup program. Optionally, it supports compression and authenticated encryption...

[SECURITY] Fedora 37 Update: borgbackup-1.2.6-1.fc37

BorgBackup short: Borg is a deduplicating backup program. Optionally, it supports compression and authenticated encryption...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 4

Package name: xms10.15.0.10417.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10327.bin, xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: September 2023 Languages supported: English US Important notes about this update As a best practice, Citrix...