EUVD-2022-41589

Malicious code in bioql PyPI...

MobileStorageMounter Privilege Escalation

The vulnerability of the MobileStorageMounter component for operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Savy Soda Wifi HD Wireless Disk Drive – Path traversal vulnerability

Savy Soda Wifi HD Wireless Disk Drive is Savy Soda's application capable of turning your iPhone or iPad into mobile network storage. A security vulnerability exists in Savy Soda Wifi HD Wireless Disk Drive version 11, which stems from vulnerability to local file inclusion attacks...

JVN#98295787: Multiple vulnerabilities in Wireless mobile storage "Digizo ShAirDisk" PTW-WMS1

Wireless mobile storage "Digizo ShAirDisk" PTW-WMS1 provided by Princeton Ltd. is a Wi-Fi storage. Wireless mobile storage "Digizo ShAirDisk" PTW-WMS1 contains multiple vulnerabilities listed below. Improper Access Restriction CWE-284 - CVE-2017-10900 Version| Vector| Score ---|---|--- CVSS v3|...

arbitrary file read

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite exists due to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a maliciou...

microprogramming software Code Execution

The vulnerability of microprogramming software in mobile storage devices like Wireless Plus Mobile Storage, Wireless Mobile Storage, LaCie FUEL, and GoFlex Satellite lies in the lack of restrictions on file loading. Exploiting this vulnerability allows attackers to execute arbitrary code by loadi...

microprogramming software administrator privileges

The vulnerability of microprogrammed software in mobile data storage devices like Wireless Plus Mobile Storage, GoFlex Satellite, LaCie FUEL, and Wireless Mobile Storage lies in the default use of a standard user password. Exploiting this vulnerability allows a malicious actor to gain administrat...

PT-2015-3214

Name of the Vulnerable Software and Affected Versions Seagate GoFlex Satellite versions prior to 3.4.1.105 Seagate Wireless Mobile Storage versions prior to 3.4.1.105 Seagate Wireless Plus Mobile Storage versions prior to 3.4.1.105 LaCie FUEL versions prior to 3.4.1.105 Description The issue allo...

PT-2015-3215

Name of the Vulnerable Software and Affected Versions Seagate GoFlex Satellite versions prior to 3.4.1.105 Seagate Wireless Mobile Storage versions prior to 3.4.1.105 Seagate Wireless Plus Mobile Storage versions prior to 3.4.1.105 LaCie FUEL versions prior to 3.4.1.105 Description The issue is...

CVE-2015-2875: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to read arbitrary files via a full pathname in a download request during a Wi-Fi...

CVE-2015-2876: Undefined Security Weakness

Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 allows remote attackers to execute arbitrary code by uploading a file to /media/sda2 during a Wi-Fi...

CVE-2015-2874: Undefined Security Weakness

Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices with firmware before 3.4.1.105 have a default password of root for the root account, which allows remote attackers to obtain administrative access via a TELNET session...

PT-2015-2965

Name of the Vulnerable Software and Affected Versions Seagate GoFlex Satellite versions prior to 3.4.1.105 Seagate Wireless Mobile Storage versions prior to 3.4.1.105 Seagate Wireless Plus Mobile Storage versions prior to 3.4.1.105 LaCie FUEL versions prior to 3.4.1.105 Description The issue is...