Seagate BlackArmor NAS device static adminstrator Password Reset vulnerability

Seagate BlackArmor NAS 路由器可以在没有任何授权下复位管理员密码，并且可以在新手引导下重置为任意密码 可以直接访问 http://目标IP地址/d41d8cd98f00b204e9800998ecf8427e.php 这个文件，然后就可以重置管理员密码。...

Seagate and LaCie Multiple Wireless Storage Products Direct Request Vulnerabilities

Seagate is the world's largest manufacturer of hard drives, disks and read/write heads, headquartered in California. A direct request vulnerability exists in several Seagate and LaCie wireless storage products, which can be exploited by an attacker to download arbitrary files directly from the fi...

Unlimited File Upload Vulnerability in Multiple Seagate and LaCie Wireless Storage Products

Seagate is the world's largest manufacturer of hard drives, disks and read/write heads, headquartered in California. An unrestricted file upload vulnerability exists in several Seagate and LaCie wireless storage products, which can be exploited by an attacker to upload arbitrary files to an...

Hardcoded Credentials Vulnerability in Multiple Seagate and LaCie Wireless Storage Products

Seagate is the world's largest manufacturer of hard drives, disks and read/write heads, headquartered in California. A hard-coded credentials vulnerability exists in several Seagate and LaCie wireless storage products, which could be exploited by an attacker to access an undisclosed Telnet servic...

dellfirmware.seagate.com XSS vulnerability

Vulnerable URL: http://dellfirmware.seagate.com/dellfirmware/DellFirmwareRequest.jsp?locale=%27%22%28%29%26%25%3Cacx%3E%3CScRiPt%20%3Eprompt%28/XSSPOSED/%29%3C/ScRiPt%3E Details: Description| Value ---|--- Patched:| Yes, at 11.09.2015 Latest check for patch:| 11.09.2015 22:27 GMT Vulnerability...

wheretobuy.seagate.com XSS vulnerability

Vulnerable URL: http://wheretobuy.seagate.com/?language=en-us%27%22%28%29%26%25%3Cacx%3E%3CScRiPt%20%3Eprompt%28/XSSPOSED/%29%3C/ScRiPt%3E Details: Description| Value ---|--- Patched:| Yes, at 11.09.2015 Latest check for patch:| 11.09.2015 22:27 GMT Vulnerability type:| XSS Vulnerability status:|...

American Internet Emergency Response Center CERT: Seagate wireless hard drive to a vulnerability-vulnerability warning-the black bar safety net

! American Internet emergency center released a on Seagate wireless hard drive with a warning, because the products were found to have multiple vulnerabilities could be exploited by attackers to download to disk all of the files. The default“root”login American Internet emergency center noted:...

Warning! Seagate Wireless Hard Drives Have a Secret Backdoor for Hackers

Several of Seagate's 3rd generation Wireless Hard drives have a secret backdoor for hackers that puts users' data at risk. A Recent study done by the security researchers at Tangible Security firm disclosed an “undocumented Telnet services” with a hard-coded password in Seagate Wireless Hard...

Seagate Business NAS <= 2014.00319 - Pre-Authentication Remote Code Execution

No description provided by source...

Seagate Business NAS 2014.00319 system/libraries/Session.php 代码执行

No description provided by source...

Seagate and LaCie wireless storage products contain multiple vulnerabilities

Overview Multiple Seagate wireless storage products contain multiple vulnerabilities. Description CWE-798: Use of Hard-coded Credentials - CVE-2015-2874 Some Seagate wireless storage products provide undocumented Telnet services accessible by using the default credentials of 'root' as username an...

Seagate Dashboard 4.0.21.0 - Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python Exploit Title: Crash PoC Seagate Dashboard 4.0.21.0 Date: 2015-06-20 Exploit Author: HexTitan Vendor Homepage: http://www.seagate.com/ Software Link:...

Seagate Dashboard 4.0.21.0 - Crash (PoC)

Seagate Dashboard 4.0.21.0 - Crash PoC !/usr/bin/env python Exploit Title: Crash PoC Seagate Dashboard 4.0.21.0 Date: 2015-06-20 Exploit Author: HexTitan Vendor Homepage: http://www.seagate.com/ Software Link: http://www.seagate.com/support/downloads/item/seagate-dashboard-windows-master-dl/...

Seagate Dashboard 4.0.21.0 - Crash (PoC)

!/usr/bin/env python Exploit Title: Crash PoC Seagate Dashboard 4.0.21.0 Date: 2015-06-20 Exploit Author: HexTitan Vendor Homepage: http://www.seagate.com/ Software Link: http://www.seagate.com/support/downloads/item/seagate-dashboard-windows-master-dl/ Version: 4.0.21.0 Tested on: Windows 8.1...

Seagate Central unauthenticated file upload

Added: 06/09/2015 Background Seagate Central is a personal cloud storage device which can be connected to a wireless router. Problem Seagate Central has no root password, allowing unauthenticated users to upload arbitrary files via PHP. This can be leveraged to execute arbitrary commands by...

Seagate Central unauthenticated file upload

Added: 06/09/2015 Background Seagate Central is a personal cloud storage device which can be connected to a wireless router. Problem Seagate Central has no root password, allowing unauthenticated users to upload arbitrary files via PHP. This can be leveraged to execute arbitrary commands by...

Seagate Central unauthenticated file upload

Added: 06/09/2015 Background Seagate Central is a personal cloud storage device which can be connected to a wireless router. Problem Seagate Central has no root password, allowing unauthenticated users to upload arbitrary files via PHP. This can be leveraged to execute arbitrary commands by...

Seagate Central unauthenticated file upload

Added: 06/09/2015 Background Seagate Central is a personal cloud storage device which can be connected to a wireless router. Problem Seagate Central has no root password, allowing unauthenticated users to upload arbitrary files via PHP. This can be leveraged to execute arbitrary commands by...

Seagate Central Remote Root Security Bypass Vulnerability

Seagate Central by default has a passwordless root account and no option to change it. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Seagate Central 2014.0410.0026-F Remote Facebook Access Token Exploit

Seagate Central stores linked Facebook account access tokens in /etc/archiveaccounts.ser and this exploit takes advantage of two bugs - Passwordless root login via FTP to retrieve archiveaccounts.ser file which contains access tokens and reuses the unencrypted and unprotected -rw-r--r-- access...