CVE-2026-71905: Improper Neutralization of Special Elements used in an OS Command

Multiple DrayTek VigorAP models contain a command injection vulnerability in the ExportSettings function. The vulnerability is caused by insufficient filtering of the backupkey, backuptype, and realtime fields before command execution. A remote attacker can trigger this vulnerability via crafted...

EUVD-2022-27081

Malicious code in bioql PyPI...

The vulnerability of the Windows BackupKey protocol implementation on Windows operating systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Windows BackupKey protocol implementation in Windows operating systems is related to the exposure of sensitive information. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

CVE-2022-21925

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...

CVE-2022-21925

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...

CVE-2022-21925

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...

Security feature bypass

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...

CVE-2022-21925

Technical details about CVE-2022-21925 are not publicly provided in the supplied documents. Monitor for updates from official sources.

CVE-2022-21925 Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

...

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability

...

PT-2022-1528 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Windows BackupKey protocol in Windows operating systems, which is associated with information disclosure. Exploitation of this issue may...

Microsoft Windows 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security feature vulnerability exists in Microsoft Windows BackupKey Remote Protocol. The following products and editions are affected: Windows Server 2008 R2 for x64-based Systems...

CVE-2022-21925: Undefined Security Weakness

Windows BackupKey Remote Protocol Security Feature Bypass Vulnerability...

DonPAPI - Dumping DPAPI Credz Remotely

Dumping revelant information on compromised targets without AV detection DPAPI dumping Lots of credentials are protected by DPAPI. We aim at locating those "secured" credentials, and retreive them using : User password Domaine DPAPI BackupKey Local machine DPAPI Key protecting TaskScheduled blob...

SAMR and LSA man in the middle attacks possible

The Security Account Manager Remote Protocol MS-SAMR and the Local Security Authority Domain Policy Remote Protocol MS-LSAD are both vulnerable to man in the middle attacks. Both are application level protocols based on the generic DCE 1.1 Remote Procedure Call DCERPC protocol. These protocols ar...