872 matches found
CVE-2023-27532
CVE-2023-27532 Veeam Backup and Replication에 영향을 미치는 CVE-2023-27532의 POC 기술적 분석 취약점에 대한 기술적 근본 원인 분석은 저희 블로그에서 확인할 수 있습니다: https://www.horizon3.ai/veeam-backup-and-replication-cve-2023-27532-deep-dive 요약 이 POC는 안전하지 않은 API 엔드포인트를 악용하여 자격 증명을 추출합니다. 사용법 root@kitploit:...
CVE-2023-27532
CVE-2023-27532 CVE-2023-27532를 악용하여 평문 자격 증명을 유출하거나 원격 명령을 실행하는 PoC 코드입니다. 개요 취약점 및 악용에 대한 자세한 분석은 Rapid7 AttackerKB 분석을 참조하십시오. 빌드 Visual Studio에서 엽니다. Veeam.Backup.Common.dll, Veeam.Backup.Interaction.MountService.dll, Veeam.Backup.Model.dll에 대한 참조를 추가하거나 업데이트해야 합니다. 더 쉽게 하려면 개발 머신에 Veeam Backu...
CVE-2024-40711-Exp
用法 root@kitploit: .\ysoserial.exe -f BinaryFormatter -g Veeam -c localhostServer -vi targetIP -vp 6170 -vg DataSet -vc "cmd /c mspaint.exe" root@kitploit: Usage: ysoserial.exe options Options: --vi, --targetveeamip=VALUE The target Veeam Backup and reaplication IP address --vp,...
veeam-cve-2023-27532-mock
CVE-2023-27532 - Veeam Backup & Replication 漏洞 漏洞描述 Veeam Backup & Replication 存在一个漏洞，可获取存储在配置数据库中的加密凭据，从而使攻击者能够访问备份基础设施主机。 Nuclei 模板 模板 veeam-cve-2023-27532.yaml 提供了使用多种检测方法对该漏洞进行全面的检测。 测试环境搭建 使用 Docker（推荐） root@kitploit: 构建 Docker 镜像 docker build -t veeam-cve-test . 运行容器 docker run -p 8080:8080...
Veeam Backup & Replication - Unauthenticated
A deserialization of untrusted data vulnerability with a malicious payload can allow an unauthenticated remote code execution RCE. id: CVE-2024-40711 info: name: Veeam Backup & Replication - Unauthenticated author: rootxharsh,iamnoooob,DhiyaneshDK severity: critical description: | A deserializati...
CVE-2024-40711
CVE-2024-40711 Veeam Backup & Replication 사전 인증 역직렬화 취약점 CVE-2024-40711 익스플로잇 기술적 세부사항은 블로그 게시물을 참조하세요 https://github.com/user-attachments/assets/24e8122c-3e84-408b-87a9-684a9aabeb70 PoC 실행 화면 root@kitploit: CVE-2024-40711.exe -f binaryformatter -g Veeam -c http://192.168.201.1:8000/trigger...
veeam-velociraptor
Veeam Backup & Replication Velociraptor 工件 - PoC 本仓库包含一组 Velociraptor 工件，作为远程 Veeam Backup & Replication 取证管线的概念验证： artifacts/ 包含工件定义 tools/ 包含一个 qemu-img.zip 归档，可用于 Windows.QEMU.ImgConvert...
How to Apply Custom Settings in Veeam Backup for Microsoft 365 Using Set-VBOConfigurationParameter
Purpose This article explains how to use the Set-VBOConfigurationParameter cmdlet to apply a custom configuration setting within a Veeam Backup for Microsoft 365 deployment. Solution How the Scripts in This Article Are Used Every script in this article begins with the same three variables, which...
How to Export Veeam Backup for Salesforce Data to Cloud or Local Storage
This article was updated on 2026-08-21 to document the new vbsf-export 1.0.0-27, which introduces support for export to local storage in addition to the previous cloud-only destinations. Purpose This article covers vbsf-export, a standalone utility that exports Salesforce backup data from a Veeam...
How to Identify and Repair Files That Cannot Be Opened After Restore
Purpose This article provides steps to identify and repair SharePoint, OneDrive, Teams files, and list attachments that were backed up with corrupted content due to the issue described in KB4835. Note: These instructions apply only to non-immutable object storage repositories that contain backups...
Veeam Backup & Replication’s vulnerability handling capabilities
Veeam has identified a vulnerability in Backup & Replication. This vulnerability allows an authenticated domain user to execute remote code on the Backup Server. As a result, an attacker with domain credentials can exploit this vulnerability to gain control over backup operations. This is a...
Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code
Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution. Tracked as CVE-2026-44963 , the vulnerability carries a CVSS score of 9.4 out of a maximum of 10.0. "A vulnerability allowing remote code execution RCE o...
Vulnerability Resolved in Veeam Backup & Replication 12.3.2.4854
All vulnerabilities documented in this article were resolved in Veeam Backup & Replication 12.3.2.4854. This vulnerability does not affect any version 13.x build of Veeam Backup & Replication due to architectural changes starting in version 13. Veeam Software Security Commitment Veeam® is committ...
Veeam Backup And Replication 代码问题漏洞
Veeam Backup and Replication is a backup and replication software developed by the American company Veeam. Veeam Backup and Replication has a code vulnerability that stems from allowing authenticated domain users to execute code remotely...
Veeam Backup and Replication < 12.3.2.4854 (kb4869)
The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4869 advisory. - A vulnerability allowing remote code execution RCE on the Backup Server by an authenticated domain user...
SCVMM Server Component Upgrade Fails After Upgrading to Veeam Backup & Replication 13
Challenge After upgrading Veeam Backup & Replication to version 13, attempts to upgrade the remote components on a highly available System Center Virtual Machine Manager SCVMM management server using the Veeam Backup & Replication Console fail with the following error: Failed to create persistent...
CVE-2026-32997
A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replication server...
Veeam Backup and Replication < 13.0.2.29 (kb4852)
The version of Veeam Backup and Replication installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4852 advisory. - A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on...
