Default credentials

ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...

CVE-2021-41302

ECOA BAS controller stores sensitive data backup exports in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege...

Release Information for Veeam Backup for Microsoft Azure v3

Requirements Please confirm that you are running version Veeam Backup for Microsoft Azure v2 build 2.0.0.303 or later before upgrading. You can find the currently installed build number Server Version in the About section under Configuration | Support Information. After installing, your build...

Release Information for Veeam Backup for AWS v4

Requirements Please confirm that you are running version Veeam Backup for AWS v3 build 3.0.0.319 or later before upgrading. You can find the currently installed build number Server Version in the About section under Configuration | Support Information. After installing Veeam Backup for AWS v4, yo...

Driver Disk for Qlogic qla2xxx 10.02.06.02-k - For Citrix Hypervisor 8.2 LTSR

Who Should Install this Driver Disk? Customers on non-Dell hardware running the Citrix Hypervisor 8.2 LTSR release who use Qlogic's qla2xxx driver and wish to use the latest version of the driver. Note: If you use Dell hardware, do not install this driver disk. This version of the driver disk is...

Dell EMC NetWorker Information Disclosure Vulnerability (CNVD-2022-42743)

Dell EMC NetWorker is a set of unified backup and recovery software from Dell DELL of the United States. The software provides backup and recovery, deduplication, backup reporting, and other features.Dell NetWorker is vulnerable to information disclosure. An attacker could use the vulnerability t...

CVE-2021-36364

Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...

CVE-2021-36364

Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...

Deserialization of untrusted data

Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...

CVE-2021-36364

Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...

CVE-2021-36364

Nagios XI before 5.8.5 incorrectly allows backupxi.sh wildcards...

CVE-2021-36364

CVE-2021-36364 affects Nagios XI prior to 5.8.5, due to backup_xi.sh wildcard handling that permits improper input processing. The entry (NVD Red Hat, etc.) notes high/critical impact (CVSS2 7.5, CVSS3.1 9.8) with network access and no authentication. A fix is available in Nagios XI 5.8.5 and lat...

FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Config Download (Unauthenticated)

Exploit Title: FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 - Config Download Unauthenticated Date: 25.07.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.fatpipeinc.com FatPipe Networks WARP/IPVPN/MPVPN 10.2.2 Unauthenticated Config Download Vendor: FatPipe Networks Inc. Product web page...

Release Information for Veeam ONE v11a

This version has been superseded by Veeam ONE 12. Requirements Make sure you are running Veeam ONE version 9.5 Update 4 build 9.5.4.4566 or later builds before installing this update. You can check this under Help | About in the Veeam ONE Client. After upgrading, your build number will change to...

A week in security (Sept 20 – Sept 26)

Last week on Malwarebytes Labs Freedom Hosting operator gets 27 years for hosting dark web abuse sites Microsoft makes a bold move towards a password-less future New Mac malware masquerades as iTerm2, remote desktop and other apps Internet safety tips for kids and teens: a comprehensive guide for...

LTO-9 Support Details for Veeam Backup & Replication 11

Challenge When using Veeam Backup & Replication 11 or 11a before P20211211, Tape Backup jobs and other tape-related tasks may fail for up to 15-30 minutes after a new uninitialized LTO-9 tape is loaded into the Tape Drive. Tasks will fail with an error similar to: Failed to inventory tape in Driv...

How to Backup the Configuration on Citrix SD-WAN Orchestrator

Procedure to Backup the Configuration on Citrix SD-WAN Orchestrator...

How to Set Up a NAS to Securely Share Files

From file backups to movie streaming, network attached storage drives offer plenty of functions and features...

Exploit for Integer Overflow or Wraparound in Apple Ipados

CVE-2021-30860 CVE-2021-30860 FORCEDENTRY is a known vulnera...

CVE-2021-39327

The BulletProof Security WordPress plugin is vulnerable to sensitive information disclosure due to a file path disclosure in the publicly accessible /dbbackuplog.txt file which grants attackers the full path of the site, in addition to the path of database backup files. This affects versions up t...