CVE-2020-23061

Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the list and download module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command...

CVE-2021-42539

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

CVE-2021-42542

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

CVE-2021-42539

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

CVE-2021-42542

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

Directory traversal

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

Design/Logic Flaw

The affected product is vulnerable to a missing permission validation on system backup restore, which could lead to account take over and unapproved settings change...

Ransomware: Why do backups fail when you need them most?

Its widely known, and endlessly repeated, that the last, best line of defence against the potentially devastating effects of a ransomware attack is your backups. So why do we keep hearing things like this: Were also feeling relatively confident, we have a very good backup system … and then we fin...

CVE-2021-42542 Emerson WirelessHART Gateway

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

CVE-2021-42542

CVE-2021-42542 affects Emerson WirelessHART Gateway devices, where a directory traversal flaw stems from mishandling the structure of the supplied backup folder during restore. Public sources (NVD, CVE record, and ICS advisory) assign a CVSSv3 base score of 8.0 (high) and note remote exploitation...

Emerson WirelessHART Gateway 路径遍历漏洞

The Emerson WirelessHART Gateway is a wireless gateway from Emerson Corporation. A path traversal vulnerability exists in the Emerson WirelessHART Gateway that stems from improper handling of the structure of the supplied backup folder. An attacker could use this vulnerability to cause directory...

Dropouts Technologies Llp 跨站脚本漏洞

Dropouts Technologies Llp Super Backup is a contact backup application from Dropouts Technologies Llp, India. A cross-site scripting vulnerability exists in Dropouts Technologies LLP Super Backup version 2.0.5, which allows an attacker to execute arbitrary web script or HTML via a crafted GET...

Dropouts Technologies Llp Super Backup 路径遍历漏洞

Dropouts Technologies Llp Super Backup is a contact backup application from Dropouts Technologies Llp, India. A security vulnerability exists in Dropouts Technologies LLP Super Backup that allows an attacker to perform directory traversal by changing a path variable to request a local list comman...

Emerson WirelessHART Gateway 访问控制错误漏洞

Emerson WirelessHART Gateway is a wireless gateway from Emerson Corporation. The Emerson WirelessHART Gateway suffers from an Access Control Error vulnerability that stems from the susceptibility of the affected product to lack of privilege validation during system backup restoration. An attacker...

The vulnerability of the HBS 3 (Hybrid Backup Sync) backup and disaster recovery application for QTS operating systems, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the HBS 3 Hybrid Backup Sync backup and disaster recovery application for QTS operating systems is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

Virtuozzo Hybrid Server 7.5 Update 2 Hotfix 1 (7.5.2-444)

The Hotfix 1 for Virtuozzo Hybrid Server 7.5 Update 2 provides new features as well as stability and usability bug fixes. Vulnerability id: PSBM-134035 libvirtd could stop responding during VM autostart after node reboot. Vulnerability id: PSBM-134221 virtio-scsi could abort inside a guest during...

Security Bulletin: A vulnerabbility exists in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Manager CVE-2021-2388, CVE-2021-2369, CVE-2021-2432, CVE-2021-2341.

Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Manager IP Edition v3.9, v4.1 and v4.2 which was disclosed in the Oracle July 2021 Critical Patch Update. Vulnerability Details Refer to the security bulletins listed in the...

How to Disable Warnings for Veeam Enterprise Plug-Ins

Challenge After upgrading to Veeam Backup & Replication 11a build 11.0.1.1261, Enterprise Plug-in backups display the warning: Backup metadata is not up to date. Please upgrade the backup. Copy Cause Starting with Veeam Backup & Replication 11, a new backup file format is used for Enterprise...

How to Connect to an Object Storage Repository via AWS Privatelink / Direct Connect

Purpose This article documents the configuration of Veeam Backup & Replication for using AWS PrivateLink or AWS Direct Connect. These services enable the following connections without the use of public endpoints: Scale-Out Backup Repository offload to Capacity Tier or Archive Tier Backup and Back...

Release Information for Veeam Backup for Google Cloud Platform v2 Patch 1

Requirements Before installing this patch, please confirm that you are running Veeam Backup for Google Cloud Platform v2 build 2.0.0.530. You can check your build number under Configuration | Support Information | About | Server version by clicking the gear icon at the top-right corner of the mai...