CVE-2025-49199

The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...

CVE-2025-49200

CVE-2025-49200 describes unencrypted backup files that can lead to disclosure of sensitive information when a backup is downloaded and decompressed. The linked sources reference SICK Field Analytics and SICK Media Server in relation to vulnerable backups, with no explicit product version or compo...

CVE-2025-49200 Unencrypted backup contains sensitive information

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup files...

CVE-2025-49199

CVE-2025-49199 involves unsigned backup ZIP files used by the application, allowing an attacker to download, modify, and re-upload a backup ZIP. This can disrupt the application by configuring services to prevent operation and redirect internal traffic to attacker-hosted services, potentially exp...

CVE-2025-49199 Backup files can be modified and uploaded

The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...

CVE-2025-49199 Backup files can be modified and uploaded

The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...

PT-2025-25325

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue arises from unsigned backup ZIP files, which can be manipulated by attackers. This allows them to disrupt the application by configuring services in a way that they are unable to run...

SICK Field Analytics和SICK Media Server 数据伪造问题漏洞

SICK Field Analytics and SICK Media Server are both products of SICK GmbH, Germany.SICK Field Analytics is software for evaluating manufacturing data.SICK Media Server is a media server. A security vulnerability exists in SICK Field Analytics and SICK Media Server that stems from an unsigned back...

CVE-2025-49199: Insufficient Verification of Data Authenticity

The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable...

PT-2025-25326

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description The issue allows for the gathering of sensitive information by downloading and decompressing unencrypted backup files created by the application. Recommendations At the moment, there is no...

CVE-2025-49200: Exposure of Sensitive Information to an Unauthorized Actor

The created backup files are unencrypted, making the application vulnerable for gathering sensitive information by downloading and decompressing the backup files...

How to Use Veeam Data Cloud Vault with ExpressRoute with Private Peering

Purpose This article documents the usage of Veeam Data Cloud Vault within environments that use Azure ExpressRoute with private peering. Solution Software Prerequisites Veeam Backup & Replication v12.3 or higher Veeam Data Cloud Vault Configuration Notes This article covers customers using...

The vulnerability of the General component of Oracle Secure Backup software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the General component of Oracle Secure Backup is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Unspecified Vulnerability in SAMSUNG Cloud for Galaxy Watch

SAMSUNG Cloud for Galaxy Watch is a data backup tool from Samsung South Korea. SAMSUNG Cloud for Galaxy Watch suffers from a security vulnerability that stems from improper default permissions, and no details of the vulnerability have been provided...

Fedora 41 : roundcubemail (2025-a5f56fe8ff)

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-a5f56fe8ff advisory. This is a security update to the stable version 1.6 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix Post-Auth RCE...

CVE-2025-5945

...

CVE-2025-5945

CVE-2025-5945 is rejected/not used; this CVE ID does not represent an active vulnerability entry.

Exploit for Unrestricted Upload of File with Dangerous Type in Wpvivid Migration\,_Backup\,_Staging

CVE-2025-5961 Migration, Backup, Staging – WPvivid Backup &...

PT-2025-24699 · Unknown · Pandora Itsm

Name of the Vulnerable Software and Affected Versions: Pandora ITSM version 5.0.105 Description: The issue is related to the improper neutralization of special elements in the backup name field, which may allow OS command injection. Recommendations: For Pandora ITSM version 5.0.105, update to a...

CVE-2025-4653: Improper Neutralization of Special Elements used in a Command

Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105...