ImpressCMS: Download full backup and Cross site scripting

A backup zip file was still left on the server, which was removed. Moreover, an old unused content editor was still left and could be used by a malicious user. The unused editor has been removed as well...

Connect to Veeam Backup for AWS appliance using private IP

Challenge You want to connect to a Veeam Backup for AWS appliance using its private IP. Solution If you want to connect to an appliance deployed in AWS Marketplace, use the instructions provided in Connecting to Existing Veeam Backup for AWS Appliances. At the Connection Type step of the wizard,...

Cayman Islands Bank Records Exposed in Open Azure Blob

A Cayman Island investment firm has removed years of backups, which up until recently were easily available online thanks to a misconfigured Microsoft Azure blob. The blob’s single URL led to vast stores of files including personal banking information, passport data and even online banking PINs —...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in operating systems involves improper handling of file operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

Backup File Download Vulnerability in OTCMS

OTCMS Nettie CMS is an article-based web content management system CMS. OTCMS has a database backup file download vulnerability, which can be exploited by an attacker to obtain the database backup file by generating a logical error in the backup file name part...

Security Bulletin: A vulnerabbility exists in the IBM® SDK, Java™ Technology Edition affect IBM Tivoli Network Configuration Manager (CVE-2019-2601).

Summary A vulnerability exists in IBM® SDK Java™ Technology Edition, Version 8, which is used by IBM Tivoli Network Configuration Manager IP Edition v6.4.2, which was disclosed in the Oracle January 2020 Critical Patch Update, but deferred until the release associated with the Oracle Oct 2020...

Design/Logic Flaw

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...

CVE-2020-29138

Incorrect Access Control in the configuration backup path in SAGEMCOM F@ST3486 NET DOCSIS 3.0, software NET4.109.0, allows remote unauthenticated users to download the router configuration file via the /backupsettings.conf URI, when any valid session is running...

Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF

Exploit Title: Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF Date: 2020-07-30 Author: Julien Ahrens Vendor Homepage: https://www.acronis.com Version: 12.5 Build 16341 CVE: CVE-2020-16171 VERSIONS AFFECTED ==================== Acronis Cyber Backup v12.5 Build 16327 and probably belo...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in operating systems involves improper handling of file operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

Release Information for Veeam Backup for AWS v3

Requirements Please confirm that you are running version v2 build 2.0.0.600 or later prior to upgrading. You can check your build number under Configuration | Support Information | About | Server version by clicking the gear icon at the top-right corner of the main menu in Veeam Backup for AWS...

How to Reset Password in Veeam Backup for Google Cloud

Challenge You need to reset the password of a Backup Administrator account used to access Veeam Backup for Google Cloud. Solution Before you begin, make sure the IP address of the machine that you are using to reset the password is on the list of allowed IP addresses added to the firewall rules...

How to Assign Permissions to Service Accounts Used by Veeam Backup for Google Cloud Platform

Challenge Veeam Backup for Google Cloud Platform requires a service account in each GCP project where data protection and disaster recovery tasks will be performed. The tasks include the following: Creating Snapshots Manually Performing Backup Perform Restore Adding Backup Repositories Create...

Veeam Backup for Google Cloud Recovery/Migration Procedure

Challenge This article explains how to recover Veeam Backup for Google Cloud data in case the backup appliance gets corrupted and requires the data to be moved to a new instance as the data contains important information about restore points, repositories, policies and so on. Solution Recommended...

Linux: Get crontab and /etc/cron.* scripts

Crontab is the program used to install, remove or list the tables used to drive the cron8 daemon. Each user can have their own crontab, and though these are files in /var/spool/, they are not intended to be edited directly. For SELinux in mls mode can be even more crontabs - for each range. Many ...

Additional Information on Cost Estimation in Veeam Backup for Google Cloud

Challenge The cost estimation feature allows you to approximately estimate the costs of Google Cloud resources required to run data protection operations for a backup policy. You can obtain granular information on how much costs running the policy will incur, with an option to export the estimati...

The vulnerability of the Windows Backup Service allows a hacker to exploit their privileges.

The vulnerability of the Windows Backup Service’s backup function is related to the operation of the process beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Driver Disk for Intel Gigabit Ethernet Controller igb 5.3.5.20 - For XenServer 7.x CR

Who Should Install this Driver Disk? Customers running a Citrix XenServer 7.x Current Release who use Intel's igb driver and wish to use the latest version of the following: Driver Module| Version ---|--- igb| 5.3.5.20 Issues Resolved In this Driver Disk Includes general enhancements and bug fixe...

Driver Disk for Cisco enic 4.0.0.11 - For Citrix Hypervisor 8.x CR

Who Should Install this Driver Disk? Customers running a Citrix Hypervisor 8.x release who use Cisco's enic driver and wish to use the latest version of the following: Driver Module| Version ---|--- enic| 4.0.0.11 Issues Resolved In this Driver Disk Includes general enhancements and bug fixes...

Hotfix XS82E004 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. Information About this Hotfix Component| Details ---|--- Prerequisite| None Post-update tasks| None Content live patchable| No Baselines for Live Patch| N/A Revision History| Published on Oct 13, 2020...