15999 matches found
The vulnerability of the automatic backup service for software network firewalls based on the FreeBSD operating system, Netgate pfSense, allows a intruder to execute arbitrary code.
The vulnerability of the automatic backup service for software network firewalls based on the FreeBSD Netgate pfSense operating system is related to the lack of security measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to execute arbitra...
Veeam Backup and Replication < 13.0.1.1071 Multiple Vulnerabilities (January 2026) (KB4792)
The version of Veeam Backup and Replication installed on the remote Windows host is prior to 13.0.1.1071. It is, therefore, affected by multiple vulnerabilities: - This vulnerability allows a Backup or Tape Operator to perform remote code execution RCE as root by creating a malicious backup...
PT-2026-1803
Name of the Vulnerable Software and Affected Versions iOS versions prior to 26.2 iPadOS versions prior to 26.2 Description A logic issue exists related to validation. Restoring from a backup may prevent a passcode from being required immediately after Face ID enrollment. Recommendations Update to...
Exploit for CVE-2025-59470
CVE-2025-59470 CVE-2025-59470 PoC exploit targeting Veeam B...
CVE-2025-68719
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and download a full configuration archive. This archive contains sensitive files such as /etc/shadow,...
CVE-2025-68719
KAYSUS KS-WR3600 routers with firmware 1.0.5.9.1 mishandle configuration management. Once any user is logged in and maintains an active session, an attacker can directly query the backup endpoint and download a full configuration archive. This archive contains sensitive files such as /etc/shadow,...
CVE-2025-59469
This vulnerability allows a Backup or Tape Operator to write files as root...
CVE-2025-59468
This vulnerability allows a Backup Administrator to perform remote code execution RCE as the postgres user by sending a malicious password parameter...
CVE-2025-59470
This vulnerability allows a Backup Operator to perform remote code execution RCE as the postgres user by sending a malicious interval or order parameter...
CVE-2025-59468
This vulnerability allows a Backup Administrator to perform remote code execution RCE as the postgres user by sending a malicious password parameter...
CVE-2025-59469
This vulnerability allows a Backup or Tape Operator to write files as root...
CVE-2025-59470
This vulnerability allows a Backup Operator to perform remote code execution RCE as the postgres user by sending a malicious interval or order parameter...
CVE-2025-55125
This vulnerability allows a Backup or Tape Operator to perform remote code execution RCE as root by creating a malicious backup configuration file...
CVE-2025-55125
This vulnerability allows a Backup or Tape Operator to perform remote code execution RCE as root by creating a malicious backup configuration file...
CVE-2025-55125
Vulnerable software: Veeam Backup & Replication (versions prior to 13.0.1.1071). Hi-level description: CVE-2025-55125 enables a Backup or Tape Operator to achieve remote code execution as root by crafting a malicious backup configuration file. Root cause stated: manipulation of backup configurati...
CVE-2025-59468
This vulnerability allows a Backup Administrator to perform remote code execution RCE as the postgres user by sending a malicious password parameter...
CVE-2025-59470
This vulnerability allows a Backup Operator to perform remote code execution RCE as the postgres user by sending a malicious interval or order parameter...
CVE-2025-59468
CVE-2025-59468 affects Veeam Backup & Replication. A Backup Administrator can achieve remote code execution as the postgres user by submitting a crafted password parameter. Red Hat and other sources corroborate the issue; Veeam’s KB4792 confirms the remediation: upgrade to 13.0.1.1071 where this ...