134 matches found
veeam-cve-2023-27532-mock
CVE-2023-27532 - Veeam Backup & Replication Vulnerability Vulnerability Description Veeam Backup & Replication contains a vulnerability that allows encrypted credentials stored in the configuration database to be obtained, allowing attackers to access backup infrastructure hosts. Nuclei Template...
CLEANSTART-2025-PI21590 LibreOffice supports the storage of passwords for web connections in the user’s configuration database
Security vulnerability affects the libreoffice package. LibreOffice supports the storage of passwords for web connections in the user’s configuration database...
CLEANSTART-2025-VT81518 LibreOffice supports the storage of passwords for web connections in the user’s configuration database
Security vulnerability affects the libreoffice package. LibreOffice supports the storage of passwords for web connections in the user’s configuration database...
CVE-2026-118990
CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...
EUVD-2026-113920
CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...
CVE-2026-118990
CallBackery versions prior to 0.62.0 for Perl are vulnerable to a security flaw where a world-readable dump of the configuration database is left in /tmp during a configuration backup. The getConfigBlob() function uses the sqlite3 shell to write the dump to a predictable location (/tmp/cbdump) wi...
CVE-2026-118990 CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup
CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...
CVE-2026-118990: Improper Link Resolution Before File Access
CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...
PT-2026-133531
CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob has the sqlite3 shell write the dump to /tmp/cbdump and never removes it. The file takes the process umask, and a symlink planted at that...
CVE-2026-106076: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability allowing an authenticated organization-transfer peer to inject SQL into the configuration database of the source Veeam Backup for Microsoft 365 server, leading to cross-tenant read and write of configuration data and remote code execution as the PostgreSQL service account...
Veeam Backup for Microsoft 365 SQL injection vulnerability
Veeam Backup for Microsoft 365 versions 8.0 through 8.5.0.1014 contain an SQL injection vulnerability. This vulnerability arises because authenticated organizations can inject SQL statements into the configuration database of the source server. It may result in cross-tenant read and write access ...
CVE-2026-63725
The CVE describes an authenticated OS command injection in sysPass, where FileBackupService::doBackupFiles() constructs a tar command by directly inserting the config-provided backup path ($this->path) into the shell command without escaping or validation, and passes it to exec(). This path co...
CVE-2026-48190
An incorrect handling of permissions in OTRS External Interface and the ConfigItem List module allows an authenticated customer to query the system for CI information. Please note that CMDB has to be anabled and CustomerGroupSupport has to be used to be affected. This issue affects OTRS: 7.0.X...
Exploit for Missing Authentication for Critical Function in Veeam Veeam_Backup_\&_Replication
CVE-2023-27532 - Veeam Backup & Replication Vulnerability...
EUVD-2019-15714
Malware in sbrugna...
EUVD-2021-21373
Malware in sbrugna...
EUVD-2025-22075
Malicious code in bioql PyPI...
EUVD-2022-43067
Malicious code in bioql PyPI...
MB CONNECT LINE mbNET.mini SQL Injection Vulnerability
The mbNET.mini from MB CONNECT LINE is an industrial router designed for industrial scenarios and is primarily used to enable secure remote connections to machines and systems. MB CONNECT LINE mbNET.mini suffers from a SQL injection vulnerability that stems from improper neutralization of special...
