CVE-2024-39865

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker...

CVE-2024-39866

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with...

CVE-2024-39866

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with...

CVE-2024-39865

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker...

Microsoft Windows Server Backup Elevation of Privilege Vulnerability

...

PT-2024-9568 · Veeam · Veeam Backup & Replication

Name of the Vulnerable Software and Affected Versions: Veeam Backup & Replication affected versions not specified Description: A series of related high-severity vulnerabilities in Veeam Backup & Replication enables remote code execution RCE as the service account and extraction of sensitive...

Siemens SINEMA Remote Connect 安全漏洞

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. Siemens SINEMA Remote Connect Server is vulnerable to a Define Privileges Using Insecure Operations...

Microsoft Windows BitLocker Security Vulnerability

Microsoft Windows BitLocker is a BitLocker by Microsoft Corporation USA Ensure secure backup of recovery keys before activating protection. A security vulnerability exists in Microsoft Windows BitLocker. An attacker exploiting this vulnerability could bypass certain features. The following produc...

PT-2024-4974 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server Backup affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Backup Service, which is caused by incorrect handling of symbolic links before accessi...

Microsoft Windows Server Security Vulnerabilities

Microsoft Windows Server is a suite of server operating systems from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Server Backup. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Versio...

PT-2024-28351 · Unknown · Mommy Heather Advanced Backups

Name of the Vulnerable Software and Affected Versions: Mommy Heather Advanced Backups versions up to 3.5.3 Description: The issue allows attackers to write arbitrary files via restoring a crafted backup. Recommendations: For versions up to 3.5.3, update to a version later than 3.5.3 to resolve th...

CVE-2024-39118

Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up...

CVE-2024-39118

CVE-2024-39118 affects Mommy Heather Advanced Backups up to v3.5.3. The vulnerability allows an attacker to write arbitrary files by restoring a crafted backup. Connected sources (Red Hat, PT-Security, etc.) confirm the affected software and the remediation guidance: upgrade to a version later th...

PT-2024-5088 · Siemens · Sinema Remote Connect Server

Name of the Vulnerable Software and Affected Versions: SINEMA Remote Connect Server versions prior to V3.2 SP1 Description: A vulnerability has been identified that allows an attacker to create a user with administrative privileges. This issue is related to insecure privilege management and the...

CVE-2024-39118: Out-of-bounds Write

Mommy Heather Advanced Backups up to v3.5.3 allows attackers to write arbitrary files via restoring a crafted back up...

CVE-2024-38013: Improper Link Resolution Before File Access

Microsoft Windows Server Backup Elevation of Privilege Vulnerability...

CVE-2024-39866: Privilege Defined With Unsafe Actions

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. This could allow an attacker with access to the backup encryption key and with the right to upload backup files to create a user with...

CVE-2024-39865: Unrestricted Upload of File with Dangerous Type

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected application allows users to upload encrypted backup files. As part of this backup, files can be restored without correctly checking the path of the restored file. This could allow an attacker...

Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication

It is an exploit module/toolkit targeting a web application. The...

PT-2024-9482 · Advantech · Advantech Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: A security issue was discovered in Advantech devices, related to the...