120 matches found
Information Disclosure Vulnerabilities in Multiple NUUO and NetGear Products
NUUO NVRmini 2 and NVRsolo are network video recorders.NetGear ReadyNAS Surveillance is a comprehensive IP video surveillance solution that integrates video surveillance software, storage, switching, and network management.NUUO Crystal is a Linux-based enterprise VMS Virtual Memory System NUUO...
NUUO NVRmini 2 and NetGear ReadyNAS Surveillance Buffer Overflow Vulnerability
NUUO NVRmini 2 is a network video recorder from NUUO.NetGear ReadyNAS Surveillance is a comprehensive IP video surveillance solution from NetGear that integrates video surveillance software, storage, switching and network management. A buffer overflow vulnerability exists in NUUO NVRmini 2 versio...
NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance Authenticated Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule 'NUUO NVRmini 2 / Crystal / NETGEAR ReadyNAS Surveillance Authenticated Remote Code Execution', 'Description' = %q The NVRmini 2...
NUUO NVRmini2 / NVRsolo / Crystal Devices / Netgear ReadyNAS Surveillance Application - Multiple Vul
Exploit for hardware platform in category remote exploits Multiple vulnerabilities in NUUO NVRmini2 / NVRsolo / Crystal devices and NETGEAR ReadyNAS Surveillance application Discovered by Pedro Ribeiro email protected, Agile Information Security http://www.agileinfosec.co.uk/...
NUUO NVRmini2 / NVRsolo / Crystal Devices / NETGEAR ReadyNAS Surveillance Application - Multiple Vulnerabilities
Multiple vulnerabilities in NUUO NVRmini2 / NVRsolo / Crystal devices and NETGEAR ReadyNAS Surveillance application Discovered by Pedro Ribeiro [email protected], Agile Information Security http://www.agileinfosec.co.uk/ ==========================================================================...
NUUO NVRmini 2 / NETGEAR ReadyNAS Surveillance Unauthenticated Remote Code Execution
The NVRmini 2 Network Video Recorder and the ReadyNAS Surveillance application are vulnerable to an unauthenticated remote code execution on the exposed web administration interface. This results in code execution as root in the NVRmini and the 'admin' user in ReadyNAS. This exploit has been test...
Netgear ReadyNAS Remote Code Execution
Unauthenticated Remote Command Execution in Netgear ReadyNAS Surveillance ========================================================================= Product Description =================== Netgear ReadyNAS Surveillance is a NVR Network Video Recorder available for Netgear NAS systems. Vulnerabilit...
Netgear ReadyNAS LAN /dbbroker 6.2.4 - Credential Disclosure
!/usr/bin/env python Exploit Title: NETGEAR ReadyNAS LAN /dbbroker Credential Stealing Date: 25/07/2015 Exploit Author: St0rn Vendor Homepage: www.netgear.fr/business/products/storage/readynas Software Link: apps.readynas.com/pages/?pageid=143 Version: Firmware 6.2.4 Import from scapy.all import...
NETGEAR ReadyNAS Perl Code Evaluation
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ManualRanking include Msf::Exploit::Remote::HttpClient def initializein...
NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)
A security vulnerability was found in FrontView web interface in NETGEAR ReadyNAS RAIDiator. The vulnerability is due to the nphandler.pl script failing to sanitize input. A remote attacker can exploit this weakness by execute arbitrary Perl code via a crafted request...
CVE-2013-2752
Cross-site request forgery CSRF vulnerability in frontview/lib/nphandler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in frontview/lib/nphandler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users...
CVE-2013-2752
Cross-site request forgery CSRF vulnerability in frontview/lib/nphandler.pl in NETGEAR ReadyNAS RAIDiator before 4.1.12 and 4.2.x before 4.2.24 allows remote attackers to hijack the authentication of users...
NETGEAR ReadyNAS Perl Code Evaluation Vulnerability
This Metasploit module exploits a Perl code injection on NETGEAR ReadyNAS 4.2.23 and 4.1.11. The vulnerability exists on the web fronted, specifically on the nphandler.pl component, due to the insecure usage of the eval perl function. This Metasploit module has been tested successfully on a NETGE...
NetGear ReadyNAS code execution
Web interface commands injection...
Netgear ReadyNAS Remote Command Execution
!/usr/bin/env python import sys from requests import get '''Lazy exploit is lazy''' def pwnlocal,remote: res = get'http://%s/nphandler/'%local,params='PAGE':'Nasstate','OPERATION':'get','SECTION':'perl -e 'use...
NETGEAR ReadyNAS Remote Unauthenticated Command Execution
The remote NETGEAR ReadyNAS device is affected by a flaw in the nphandler.pl script that allows an unauthenticated, remote attacker to execute arbitrary commands with root privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
NETGEAR ReadyNAS Perl Code Evaluation
This module exploits a Perl code injection on NETGEAR ReadyNAS 4.2.23 and 4.1.11. The vulnerability exists on the web front end, specifically in the nphandler.pl component, due to an insecure usage of the eval perl function. This module has been tested successfully on a NETGEAR ReadyNAS 4.2.23...
Default Root Password in Infrant (now Netgear) ReadyNAS "RAIDiator"
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory Default Root Password in Infrant now Netgear ReadyNAS "RAIDiator" Release Date: August 13, 2007 Authors: Brian Chapados [email protected] Felix Domke [email protected] Timeline: Jul 25, 2007 - discovery Jul 29, 2007 - vendor...