Complete Multi Hospital Management System 1.0 Backup Disclosure

============================================================================================================================================= | Title : Complete Multi Hospital Management System 1.0 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

PT-2024-14788

Name of the Vulnerable Software and Affected Versions Synology Active Backup for Business Agent versions prior to 2.7.0-3221 Description The issue concerns a missing encryption of sensitive data vulnerability in the login component. This allows adjacent man-in-the-middle attackers to obtain user...

PT-2024-11895 · Synology · Synology Drive Client

Name of the Vulnerable Software and Affected Versions: Synology Drive Client versions prior to 3.4.0-15721 Description: A buffer copy without checking the size of the input, also known as a 'Classic Buffer Overflow', exists in the backup task management functionality. This issue allows local user...

PT-2024-11893

Name of the Vulnerable Software and Affected Versions Synology Drive Client versions prior to 3.4.0-15721 Description The issue is an out-of-bounds write vulnerability in the backup task management functionality. This allows local users with administrator privileges to execute arbitrary commands...

PT-2024-14787 · Synology · Synology Active Backup For Business Agent

Name of the Vulnerable Software and Affected Versions: Synology Active Backup for Business Agent versions prior to 2.7.0-3221 Description: The issue involves missing authentication for a critical function in the proxy settings functionality, allowing local users to obtain user credentials via...

Minimum supported OS version for Veeam VSS Hardware Provider is Microsoft Server 2012 (64-bit only).

Challenge An attempt to rescan, upgrade, or update the Veeam Backup Server fails with the error: Minimum supported OS version for Veeam VSS Hardware Provider is Microsoft Server 2012 64-bit only. Cause This issue occurs because an entry in the Configuration Database causes the Veeam Backup &...

Multi Branch School Management System 3.5 Backup Disclosure

============================================================================================================================================= | Title : Multi Branch School Management System 3.5 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser :...

Reservation Management System 1.0 Backup Disclosure

============================================================================================================================================= | Title : Reservation Management System 1.0 Backup Disclosure Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla...

The vulnerability of the Hot Backup File component in the MongoDB database management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Hot Backup File component in the MongoDB database management system relates to the possibility for users with limited privileges to download backup files, along with obtaining a unique identifier for the backup copy. Exploiting this vulnerability could allow an attacker,...

Proxmox VE Compatibility with Veeam Backup Server OS Server 2012 and 2012 R2

Article Applicability This article is relevant only when the machine where Veeam Backup & Replication is installed uses either Server 2012 or Server 2012 R2. Challenge After adding Proxmox VE PVE hosts to Veeam Backup & Replication, the workers are deployed, but the testing phase fails with the...

The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Console (VSPC) users allows a hacker to bypass authentication procedures and gain unauthorized access to protected information.

The vulnerability of the NTLM protocol implementation in the backup and recovery software for remote and cloud-based Veeam Service Provider Consoles is related to insufficient protection of service data. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures an...

CVE-2024-9004

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/BackupServercommit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploi...

CVE-2024-9004 D-Link DAR-7000 Backup_Server_commit.php os command injection

A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/BackupServercommit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploi...

D-Link DAR-7000 操作系统命令注入漏洞

D-Link DAR-7000 is an Internet Behavior Audit Gateway from China AUO D-Link. An OS command injection vulnerability exists in the D-Link DAR-7000 20240912 and earlier versions, which stems from the parameter host in the file /view/DBManage/BackupServercommit.php that can lead to OS command...

Error: ".NET (`dotnet-`) must be added to the blacklist to prevent unattended upgrades that could impact the availability of the Linux proxy."

Challenge Attempting to add a Linux-base proxy in Veeam Backup for Microsoft 365 fails with the error: Error: .NET dotnet- must be added to the blacklist to prevent unattended upgrades that could impact the availability of the Linux proxy. Cause This error occurs when the proxy deployment process...

VulnCheck KEV: CVE-2023-28365

A backup file vulnerability found in UniFi applications Version 7.3.83 and earlier running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored...

Virtuozzo Automator 7.0 Update 2 Hotfix 16 (VA MN 7.0.2-718, VA Agent 7.0.2-430)

The Hotfix 16 for Virtuozzo Automator 7.0.2 provides new features and stability and usability fixes. Vulnerability id: PVA-37810 Fixed an issue when a scheduled backup task created additional unwanted backups. Vulnerability id: PVA-37803 Fixed an issue when, in some cases, a scheduled task was...

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers targets programming environments such as cPanel & WHM, Plesk, and DirectAdmin, running on Linux operating systems. This vulnerability allows attackers to gain increased privileges.

The vulnerability of the backup and data restoration plugins on Acronis Backup software for computers and servers, as well as for cPanel & WHM, Plesk, and DirectAdmin operating systems on Linux, is related to errors in privilege management. Exploiting this vulnerability can allow attackers to...

How to Migrate Veeam Backup for Salesforce off CentOS

Purpose This article documents how to migrate a Veeam Backup for Salesforce VBSF deployment from a machine running CentOS 7 to a machine running a supported Linux distro. Starting in Veeam Backup for Salesforce version 3, CentOS will no longer be supported as a distro for the deployment of Veeam...

How to use Azure Database for PostgreSQL with Veeam Backup for Microsoft 365

Purpose This article documents how to utilize Azure Database for PostgreSQL to host the Veeam Backup for Microsoft 365 v8 or higher configuration database. Solution After deploying Azure Database for PostgreSQL, additional steps must be performed to ensure it can be utilized by Veeam Backup for...