EUVD-2018-3216

Malware in sbrugna...

EUVD-2018-3195

Malware in sbrugna...

EUVD-2018-3225

Malware in sbrugna...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15888)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setencryptionsettings method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15623)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the startfilesystem method in Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15618)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the Support Portal method in Quest DR Series Disk Backup Software before 4.0.3.1. An attacker can exploit this vulnerability to achieve command injection via the 'email' parameter...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15890)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the saveconfiguration method in Quest DR Series disk backup software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15897)

The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to elevate privileges from web server user to root via setsid...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15629)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the activatereplicaVTLcontainer method in Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute commands via the container name...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15876)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Create Storage Group" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15625)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setBandwidthLimit method in Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15887)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Delete Duplicates" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15878)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Join Domain" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. The vulnerability can be exploited to execute system commands via the 'domain' parameter...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15889)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Add Email Alert" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15624)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setpassphrase method of Quest DR Series disk backup software before 4.0.3.1. An attacker could exploit this vulnerability to execute arbitrary system commands...

Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15909)

The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability via env to elevate privileges from web server user to root...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15871)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setCleaner method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker could exploit this vulnerability to execute commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15875)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the registerDR2000v method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'LicenseServer',...

Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15903)

The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability via perl to elevate privileges from web server user to root...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15865)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the 'Logon' method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker can exploit this vulnerability to execute arbitrary commands via the 'Password' paramete...