CatDV unauth RMI aaftoolPath root RCE

SSH to target: unauth RMI saveSettings aaftoolPath + web login trigger AAF export. Requires sshkey root on appliance. """CatDV Server Unauthenticated RMI Root RCE""" from future import annotations from kittysploit import import base64 import os import subprocess import sys import time import re...

CatDV Server Authenticated aaftoolPath Root RCE — Detect

Fingerprint / reachability check for CatDV Server Authenticated aaftoolPath Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for CatDV Server Authenticated aaftoolPath Root RCE""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

EUVD-2021-13495

Malware in sbrugna...

CVE-2021-26705

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

CVE-2021-26705

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

CVE-2021-26705

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

CVE-2021-26705

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

Authentication flaw

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

CVE-2021-26705

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

CVE-2021-26705: Missing Authentication for Critical Function

An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within...

PT-2021-17102

Name of the Vulnerable Software and Affected Versions SquareBox CatDV Server versions through 9.2 Description An issue was discovered in SquareBox CatDV Server, where an attacker can invoke sensitive RMI methods, such as getConnections, without authentication. The results of these methods can be...