115 matches found
EUVD-2022-35362
Malicious code in bioql PyPI...
Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics
Cybersecurity researchers have discovered a new campaign that employs a previously undocumented ransomware family called Charon to target the Middle East's public sector and aviation industry. The threat actor behind the activity, according to Trend Micro, exhibited tactics mirroring those of...
Linux Distros Unpatched Vulnerability : CVE-2015-5299
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shadowcopy2getshadowcopydata function in modules/vfsshadowcopy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 does not...
CVE-2024-55916 Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: util: Avoid accessing a ringbuffer not initialized yet If the KVP or VSS daemon starts before the VMBus channel's ringbuffer is fully initialized, we can hit the panic below: hvutils: Registering HyperV Utility Drive...
Backup fails with: "The system cannot find the file specified." or "The device is not ready."
Version Applicability This article does not list specific versions of Veeam products because the underlying issue stems from a problem with the Microsoft Volume Shadow Copy Service and is independent of any Veeam product versions. As such, the issue can affect environments regardless of the Veeam...
PT-2024-19422 · Hewlett Packard · Hpe Msa Storage
Name of the Vulnerable Software and Affected Versions: HPE MSA storage products affected versions not specified Description: A potential security issue has been identified in VSS Provider and CAPI Proxy software for certain HPE MSA storage products. This issue could be exploited to gain elevated...
HPESBST04630 rev.1 - HPE MSA SAN Storage VSS Provider and CAPI Proxy Software, Elevation of Privilege
Potential Security Impact: Local: Elevation of Privilege, Unquoted Search Path SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE MSA 1040 SAN Storage - Prior to v4.1.3.83 HPE MSA 1050 SAN Storage - Prior to v4.1.3.83 HPE MSA 1060 Storage - Prior to v4.1.3.83 HPE MSA 2040 SAN...
The vulnerability of the Volume Shadow Copy Service (VSS) in Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the Volume Shadow Copy Service VSS in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2023-32054
Volume Shadow Copy Elevation of Privilege Vulnerability...
CVE-2023-32054
Volume Shadow Copy Elevation of Privilege Vulnerability...
CVE-2023-32054
Volume Shadow Copy Elevation of Privilege Vulnerability...
Privilege escalation
Volume Shadow Copy Elevation of Privilege Vulnerability...
CVE-2023-32054 Volume Shadow Copy Elevation of Privilege Vulnerability
...
CVE-2023-32054
CVE-2023-32054 is referenced in connected content as a local elevation-of-privilege vulnerability related to Shadow Copy restoration. The MagicDot tooling (GitHub: SafeBreach-Labs/MagicDot) includes a Shadow Copy restoration exploit specifically for CVE-2023-32054, described among a package of ro...
CVE-2023-32054 Volume Shadow Copy Elevation of Privilege Vulnerability
...
Microsoft Windows Volume Shadow Copy 安全漏洞
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Volume Shadow Copy. An attacker could exploit this vulnerability to gain elevated privileges. The following...
PT-2023-3527 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the Volume Shadow Copy Service VSS in Windows operating systems and is caused by inadequate access restrictions. This can allow an attacker to elevate their...
SUSE CVE-2014-0178
Samba 3.6.6 through 3.6.23, 4.0.x before 4.0.18, and 4.1.x before 4.1.8, when a certain vfs shadow copy configuration is enabled, does not properly initialize the SRVSNAPSHOTARRAY response field, which allows remote authenticated users to obtain potentially sensitive information from process memo...
The vulnerability of the File Server Shadow Copy Agent Service (RVSS) in the Windows operating system allows a hacker to bypass security restrictions and gain increased privileges.
The vulnerability of the File Server Shadow Copy Agent Service RVSS in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain increased privileges...