CVE-2021-40387

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is authenticated remote code execution...

CVE-2021-40387

CVE-2021-40387 affects the server software in Kaseya Unitrends Backup Software before 10.5.5-2 . The vulnerability enables authenticated remote code execution . Available connected documents confirm the affected product and impact but do not provide concrete exploit details, specific root cause, ...

Security Bulletin: Vulnerability in Urllib3 affects IBM Spectrum Protect Plus Microsoft File Systems Backup and Restore (CVE-2021-33503)

Summary Denial of Service vulnerability in Urllib3 may affect IBM Spectrum Protect Plus Microsoft® File Systems backup and restore. Vulnerability Details CVEID: CVE-2021-33503 DESCRIPTION: urllib3 is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw du...

CVE-2020-20495

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

CVE-2020-20495

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

Arbitrary file deletion

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

Unitrends Backup 安全漏洞

Unitrends Backup is a set of data protection software from Unitrends, Inc. in the United States. The software provides data backup, data recovery and deduplication features. A remote code execution vulnerability exists in Unitrends Backup versions prior to 10.5.5-2, which can be exploited by an...

Unitrends Backup 安全漏洞

Unitrends Backup is a set of data protection software from Unitrends, Inc. in the United States. The software provides data backup, data recovery and deduplication features. An elevation of privilege vulnerability exists in versions prior to Unitrends Backup 10.5.5-2, which can be exploited by an...

Virtuozzo Automator 7.0 Update 2 Hotfix 14 (VA Agent: 7.0.2-402)

The Hotfix 14 for Virtuozzo Automator 7.0.2 provides stability and usability fixes. Vulnerability id: PVA-37546 The VA Agent could return an incorrect value for the 'counteriopsused' counter. Vulnerability id: PVA-37639 For containers migrated from Virtuozzo 6 or earlier, only full backups were...

CVE-2020-20495

bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup' parameter...

CVE-2021-35526

Backup file without encryption vulnerability is found in Hitachi ABB Power Grids System Data Manager – SDM600 allows attacker to gain access to sensitive information. This issue affects: Hitachi ABB Power Grids System Data Manager – SDM600 1.2 versions prior to FP2 HF6 Build Nr. 1.2.14002.257...

FBI-CISA Advisory on Ransomware Awareness for Holidays and Weekends

Today, the Federal Bureau of Investigation FBI and CISA released a Joint Cybersecurity Advisory CSA to urge organizations to ensure they protect themselves against ransomware attacks during holidays and weekends—when offices are normally closed. Although FBI and CISA do not currently have any...

Release Information for Veeam Backup for Microsoft 365 5d

A Cumulative Patch is available for this release: Veeam Backup for Microsoft 365 5d Cumulative Patch KB4278 Requirements Please confirm that you are running one of the following versions of Veeam Backup for Microsoft 365 before upgrading to 5d: 3.0 build 3.0.0.422 4.0 build 4.0.0.1345 4a builds...

bludit 安全漏洞

Bludit is an open source lightweight blog content management system CMS. bludit v3.13.0 contains an arbitrary file deletion vulnerability in the backup plugin via the deleteBackup parameter...

Cross-Site Request Forgery (CSRF) in myvesta/vesta

✍️ Description In this application there is weak CSRF protection on backup functionality. therefore according to below POC.html when a logged in user visits attacker website then an unintentional backup request sends to application. 🕵️‍♂️ Proof of Concept //PoC.html history.pushState'', '', '/'...

Release Information for Dell PowerMax Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing Dell PowerMax Plug-In v1.1.7, ensure that you are running Veeam Backup & Replication...

How Ready Are You for a Ransomware Attack?

Determining how hard a target you present for the current wave of human-driven ransomware involves multiple considerations. There are four steps to analyzing how prepared you are for a ransomware attack. Such analysis roughly breaks down as follows: 1 How easy it is to break into your environment...

How to Temporarily Disable Exchange Web Services Throttling

Purpose This article documents how to temporarily disable Exchange Web Services API throttling, potentially improving Exchange backup performance in Veeam Backup for Microsoft 365. Note: Throttling may only be disabled temporarily; this should be sufficient to allow Veeam Backup for Microsoft 365...

How to Reduce Exchange Server Downtime in Case of a Disaster?

Exchange Server downtime may occur at any point in time due to several reasons, such as malware attack, server crash, database corruption, and hardware or software-related issues/incompatibility. However, downtime can impact productivity and lead to data loss that can have severe implications on...

Information Disclosure

github.com/wal-g/wal-g is vulnerable to information disclosure. The vulnerability exists when user uses libsodium encryption for their backup files which is not available but are silently processed and uploaded as plaintext...