CVE-2024-29855

CVE-2024-29855 Veeam Recovery Orchestrator 인증 우회 CVE-2024-29855 - SummoningTeam @SummoningTeam 소속 Sina Kheirkhah @SinSinology 작성 기술 분석 취약점의 근본 원인 분석은 제 블로그에서 확인할 수 있습니다 요약 Veeam은 Veeam Recovery Orchestrator에 영향을 주는 인증 우회 취약점 CVE-2024-29855에 대한 CVSS 9 권고를 발표했습니다. 다음은 이 문제에 대한 저의 전체 분석과 익스플로잇입니다. 이...

CVE-2023-27532-RCE-Only

포크 버전 RCE 전용 저장소를 포크하고 자격 증명 유출 부분을 제거했습니다. 컴파일을 위한 수정 사항을 적용했습니다. CVE-2023-27532 CVE-2023-27532를 악용하여 평문 자격 증명을 유출하거나 원격 명령 실행을 수행하는 개념 증명PoC 코드입니다. 개요 취약점 및 악용에 대한 자세한 분석은 Rapid7 AttackerKB 분석을 참조하십시오. 빌드 Visual Studio에서 엽니다. Liberis의 Veeam.Backup.Common.dll,...

CVE-2024-40711-Exp

사용법 root@kitploit: .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" root@kitploit: Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE 대상 Veeam Backup 및 Replication IP 주소 --vp, --targetveeamport=VALUE 대상 Veeam...

Veeam Backup & Replication - Unauthenticated

A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...

CVE-2026-44963

CVE-2026-44963 — Удаленное выполнение кода в Veeam Backup & Replication Исследовательский репозиторий отSentinelX — только для авторизованного тестирования безопасности и защитных целей. Обзор Поле| Детали ---|--- CVE ID| CVE-2026-44963 Вендор| Veeam Продукт| Backup & Replication Затронутые верси...

CVE-2023-27532

CVE-2023-27532 POC для CVE-2023-27532, затрагивающий Veeam Backup and Replication Технический анализ Технический анализ первопричины уязвимости можно найти в нашем блоге: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive Краткое описание Этот POC использует незащищенну...

Modified-CVE-2020-10915-MsfModule

Modified-CVE-2020-10915-MsfModule ЭТО НЕ ОРИГИНАЛЬНЫЙ ЭКСПЛОИТ. ЭТО АУДИТИРОВАННАЯ ВЕРСИЯ ДЛЯ THM BOX Ниже приведены ссылки на оригинал, комнату tryhackme и мой разбор этой комнаты:...

CVE-2023-27532

CVE-2023-27532 CVE-2023-27532 を悪用して、平文の資格情報を漏えいさせるか、リモートコマンド実行を行う Proof of Concept コードです。 概要 脆弱性と悪用の詳細な分析については、Rapid7 の AttackerKB 分析 をお読みください。 ビルド Visual Studio で開きます。Veeam.Backup.Common.dll、Veeam.Backup.Interaction.MountService.dll、Veeam.Backup.Model.dll への参照を追加または更新する必要があります。簡単にするには、開発マシンに Vee...

CVE-2024-29849

CVE-2024-29849 Veeam Backup Enterprise Manager 인증 우회 CVE-2024-29849 - 작성자: Sina Kheirkhah @SinSinology, 소속: SummoningTeam @SummoningTeam 기술 분석 취약점의 근본 원인 분석은 제 블로그에서 확인할 수 있습니다. 요약 지원 버전? Veeam 공식 권고에 따르면, Veeam Backup Enterprise Manager 12.1.2.172 이전의 모든 버전이 취약합니다. 사용법 먼저, 로컬 HTTPS 설정을 위해 올바른 구성...

CVE-2022-26503

CVE-2022-26503 Резюме: Уязвимость CVE-2022-26503 в Veeam Agent для Microsoft Windows позволяет локальному повышению привилегий. Злоумышленник, успешно эксплуатирующий эту уязвимость, может выполнить произвольный код с привилегиями LOCAL SYSTEM. Отдельное спасибо @ultrayoba Патч: Реализованный пат...

veeam-cve-2023-27532-mock

CVE-2023-27532 - Schwachstelle in Veeam Backup & Replication Beschreibung der Schwachstelle Veeam Backup & Replication enthält eine Schwachstelle, die es ermöglicht, verschlüsselte Anmeldedaten aus der Konfigurationsdatenbank zu erlangen, sodass Angreifer auf Hosts der Backup-Infrastruktur...

CVE-2024-40711

CVE-2024-40711 Exploit für Veeam Backup and Replication Pre-Auth-Deserialisierung CVE-2024-40711 Siehe unseren Blogbeitrag für technische Details. https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC in Aktion root@kitploit: CVE-2024-40711.exe -f binaryformatter -g...

CVE-2026-58073-check

Script di rilevamento dello stato di patch per l'impersonificazione dell'agente di Veeam Service Provider Console Un rilevatore sicuro e non autenticato per le vulnerabilità KB4893 in Veeam Service Provider Console pubblicato il 04-08-2026. Risponde a una domanda per ogni target, prima di qualsia...

veeam-velociraptor

Artefatti Velociraptor per Veeam Backup & Replication - PoC Questo repository contiene una collezione di artefatti Velociraptor che fungono da prova di concetto per una pipeline forense remota di Veeam Backup & Replication: artifacts/ contiene le definizioni degli artefatti tools/ contiene un...

PT-2026-82111

Name of the Vulnerable Software and Affected Versions Veeam ONE versions prior to 13.1.0.7233 Veeam ONE versions prior to 13.0.2.7159 Description An unauthenticated network attacker can coerce the Veeam ONE service account into performing SMB Server Message Block authentication. This action...

CVE-2024-42448-RCE

CVE-2024-42448-RCE Veeam Service Provider Console VSPC esecuzione di codice remoto. Link di download qui Dettagli: è una vulnerabilità critica identificata nel Veeam Service Provider Console VSPC con un punteggio CVSS di 9.9. Questa vulnerabilità consente l'esecuzione di codice remoto RCE...

VeeamDumper-BOF

Veeam Dumper BOF Un BOF per l'estrazione di credenziali per Veeam Backup and Replication e Veeam One di Stephen Munro e Logan Kroeger di @MWRCyberSec. Il BOF deve essere eseguito in un beacon Admin su un server Veeam One o Veeam Backup and Replication e supporta Cobalt Strike e Outflank C2...

Release Information for NetApp ONTAP Plug-In for Veeam Backup & Replication

This plug-in leverages the Veeam Universal Storage API, which enables storage OEMs to allow Veeam Backup & Replication integration to the arrays for backup and replication jobs. Requirements Before installing NetApp ONTAP Plug-In v2.0.14, ensure that you are running at least Veeam Backup &...

Vulnerability Resolved in Veeam Backup & Replication 13.1

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Veeam ONE < 13.1.0.7233 (kb4905)

The version of Veeam ONE installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4905 advisory. - A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. CVE-2026-6564...