Lucene search
+L

2131 matches found

NVD
NVD
added 2018/02/23 5:29 p.m.19 views

CVE-2014-3206

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

10CVSS9.9AI score0.51014EPSS
SaveExploits1References1
CVE
CVE
added 2018/02/23 5:0 p.m.151 views

CVE-2014-3206

CVE-2014-3206 affects Seagate BlackArmor NAS. It allows remote attackers to execute arbitrary code by sending the session parameter to /backupmgt/localJob.php or the auth_name parameter to /backupmgmt/pre_connect_check.php, enabling remote code execution on the device. Root cause: improper input ...

10CVSS9.7AI score0.51014EPSS
SaveIn wildExploits1References1Affected Software1
CVE
CVE
added 2018/02/23 5:0 p.m.49 views

CVE-2014-3205

The CVE-2014-3205 issue affects Seagate BlackArmor NAS in backupmgt/pre_connect_check.php, where a backdoor user is authenticated using a hard-coded password '!~@##$$%FREDESWWSED'. The vulnerability is documented across multiple sources (NVD entry, CNVD/CVE records, and CNVD Chinese advisory) and...

10CVSS9.4AI score0.02733EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/02/23 5:0 p.m.27 views

CVE-2014-3206

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

9.9AI score0.51014EPSS
SaveExploits1References1
Core Security
Core Security
added 2018/02/14 12:0 a.m.650 views

Dell EMC Isilon OneFS Multiple Vulnerabilities

1. Advisory Information Title: Dell EMC Isilon OneFS Multiple Vulnerabilities Advisory ID: CORE-2017-0009 Advisory URL:https://www.coresecurity.com/core-labs/advisories/dell-emc-isilon-onefs-multiple-vulnerabilities Date published: 2018-02-14 Date of last update: 2018-02-15 Vendors contacted: Del...

8.8CVSS8.1AI score0.28186EPSS
SaveExploits13
ThreatPost
ThreatPost
added 2018/02/08 2:51 p.m.12 views

Insurance Customers’ Personal Data Exposed Due to Misconfigured NAS Server

Detailed personal information from thousands of insurance customers in Maryland–as well as login credentials for a massive national insurance claims database–was exposed due to an an open port on a NAS server. The misconfiguration exposed a wealth of information on Maryland Joint Insurance...

0.6AI score
SaveExploits0References4
exploitpack
exploitpack
added 2018/01/08 12:0 a.m.27 views

Synology Photostation 6.7.2-3429 - Multiple Vulnerabilities

Synology Photostation 6.7.2-3429 - Multiple Vulnerabilities Synology Photostation Multiple Vulnerabilities Vendor: Synology Product: Synology Photostation Version: = 6.7.2-3429 Website: http://www.synology.com / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// //...

0.1AI score
SaveExploits0
CNVD
CNVD
added 2018/01/06 12:0 a.m.4 views

Western Digital My Cloud NAS Appliance Denial of Service Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. A denial of service vulnerability exists in the Western Digital My Cloud NAS device, which can be exploited by an attacker to conduct denial of service attacks because any unauthenticated user can set global language preference...

6.9AI score
SaveExploits0References1
CNVD
CNVD
added 2018/01/06 12:0 a.m.7 views

Western Digital My Cloud NAS Device Cross-Site Request Forgery Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. A cross-site request forgery vulnerability exists in the Western Digital My Cloud NAS device due to the lack of XSRF protection in the WD My Cloud web interface, which allows an attacker to connect a victim's web browser to the...

6.8AI score
SaveExploits0References1
CNVD
CNVD
added 2018/01/06 12:0 a.m.4 views

Western Digital My Cloud NAS Device Hardcoded Backdoor Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. A hard-coded backdoor vulnerability exists in the Western Digital My Cloud NAS device, where an administrator username and password cannot be changed because they are hard-coded into a binary file, allowing an arbitrary user to...

7.2AI score
SaveExploits0References1
Packet Storm
Packet Storm
added 2018/01/05 12:0 a.m.58 views

WDMyCloud 2.30.165 CSRF / File Upload / Code Execution / Backdoor / DoS

/ / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development WDMyCloud = 2.30.165 Multiple Vulnerabilities Released Date: 2018-01-04 Last Modified: 2017-06-11 Company Info: Western Digital Version Info: Vulnerable MyCloud =...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2018/01/03 12:0 a.m.37 views

WDMyCloud 2.30.165 - Multiple Vulnerabilities

WDMyCloud 2.30.165 - Multiple Vulnerabilities WDMyCloud Multiple Vulnerabilities Vendor: Western Digital Product: WDMyCloud Version: = 2.30.165 Website: https://www.wdc.com/products/network-attached-storage.html / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,///...

0.2AI score
SaveExploits0
Prion
Prion
added 2017/12/29 3:29 p.m.13 views

Buffer overflow

A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response...

10CVSS9.8AI score0.39634EPSS
SaveExploits6References1Affected Software1
NVD
NVD
added 2017/12/29 3:29 p.m.38 views

CVE-2017-17968

A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response...

10CVSS9.8AI score0.39634EPSS
SaveExploits6References1
OSV
OSV
added 2017/12/29 3:29 p.m.8 views

CVE-2017-17968

A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response...

9.8CVSS6.4AI score0.39634EPSS
SaveExploits6References1
Cvelist
Cvelist
added 2017/12/29 3:0 p.m.38 views

CVE-2017-17968

A buffer overflow vulnerability in NetTransport.exe in NetTransport Download Manager 2.96L and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long HTTP response...

9.8AI score0.39634EPSS
SaveExploits6References1
exploitpack
exploitpack
added 2017/12/29 12:0 a.m.64 views

NetTransport 2.96L - Remote Buffer Overflow (DEP Bypass)

NetTransport 2.96L - Remote Buffer Overflow DEP Bypass !/usr/bin/pythion Exploit Title: Buffer overflow in NetTransport Download Manager - Version 2.96L DEP Bypass CVE: CVE-2017-17968 Date: 28-12-2017 Software Link: http://xi-soft.com/downloads/NXSetupx86.zip Exploit Author: Author: Aloyce J...

10CVSS0.3AI score0.39634EPSS
SaveExploits6
zdt
zdt
added 2017/12/29 12:0 a.m.48 views

NetTransport 2.96L - Buffer Overflow (DEP Bypass) Exploit

Exploit for windows platform in category remote exploits Exploit Title: Buffer overflow in NetTransport Download Manager - Version 2.96L DEP Bypass CVE: CVE-2017-17968 Date: 28-12-2017 Software Link: http://xi-soft.com/downloads/NXSetupx86.zip Exploit Author: Author: Aloyce J. Makalanga Contact:...

10CVSS9.7AI score0.39634EPSS
SaveExploits6
Packet Storm
Packet Storm
added 2017/12/28 12:0 a.m.50 views

NetTransport Download Manager 2.96L Buffer Overflow

Exploit Title: Buffer overflow in NetTransport Download Manager - Version 2.96L DEP Bypass CVE: CVE-2017-17968 Date: 28-12-2017 Software Link: http://xi-soft.com/downloads/NXSetupx86.zip Exploit Author: Author: Aloyce J. Makalanga Contact: https://twitter.com/aloycemjr Vendor Homepage:...

0.6AI score0.39634EPSS
SaveExploits6
OSV
OSV
added 2017/12/27 5:8 p.m.5 views

CVE-2017-17849

A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response...

9.8CVSS6.4AI score0.19015EPSS
SaveExploits9References3
Rows per page
Query Builder