CVE-2024-25228

概要

参考情報

• blog.leakix.net/2024/01/vinchin-backup-rce-chain · Exploit
• seclists.org/fulldisclosure/2024/Mar/15 · Mailing List
• seclists.org/fulldisclosure/2024/Mar/15

vinchin backup and recovery のその他の脆弱性

• CVE-2024-22903高 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK …
• CVE-2024-22902緊急 9.8Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
• CVE-2024-22901緊急 9.8Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
• CVE-2024-22900高 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardIn…
• CVE-2024-22899高 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime func…