CVE-2024-22902

Description

References

• blog.leakix.net/2024/01/vinchin-backup-rce-chain · Exploit
• seclists.org/fulldisclosure/2024/Jan/31 · Mailing List
• packetstormsecurity.com/files/176795/Vinchin-Backup-And-Recovery-7.2-Default-Root-Credentials.html
• seclists.org/fulldisclosure/2024/Jan/31

vinchin backup and recovery 的其他漏洞

• CVE-2024-25228高危 8.8Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function i…
• CVE-2024-22903高危 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK …
• CVE-2024-22901严重 9.8Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
• CVE-2024-22900高危 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardIn…
• CVE-2024-22899高危 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime func…