315 matches found
CVE-2022-24990
CVE-2022-24990 Description - POC for CVE-2022-24990: TerraMaster TOS unauthenticated remote command execution via PHP Object Instantiation. - create by antx at 2022-04-12. Detail - The vulnerability allows a remote attacker to execute arbitrary commands on the target system. - The vulnerability...
TerraMaster-TOS-CVE-2020-15568
TerraMaster TOS CVE-2020-15568 Repository for CVE-2020-15568 Metasploit module Vulnerable Application Description A dynamic class method invocation vulnerability exists in file include/exportUser.php which leads to executing remote commands on TerraMaster devices with root privileges. The...
TerraMaster TOS <.1.29 - Remote Code Execution
TerraMaster TOS before 4.1.29 has invalid parameter checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter. id:...
TerraMaster TOS < 4.2.06 - User Enumeration
User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...
TerraMaster TOS < 4.2.30 Server Information Disclosure
TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure. id: CVE-2022-24990 info: name: TerraMaster TOS 4.2.30 Server Information Disclosure author: dwisiswant0 severity: high description: TerraMaster NAS devices running TOS prior to version 4.2.30 are...
CVE-2022-24990-TerraMaster-TOS--PHP-
This repository does not have a README...
CVE-2022-24990
CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...
Cheatsheet-God
root@kitploit: + UPDATE: Added my huge link of bookmarks / references ❤️ Do you have a million bookmarks saved? Do all of those bookmarks contain unique information? Github repos starred for later? Well this is a compilation of all of these resources into a single repo known as Cheatsheet-God. No...
CVE-2021-26380: Integer Overflow or Wraparound
A compromised Trusted OS TOS driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity...
PropertyGuru AgentNet Singapore App 安全漏洞
The PropertyGuru AgentNet Singapore App is a mobile application used by PropertyGuru in Singapore as an real estate agency. The PropertyGuru AgentNet Singapore App versions prior to 23.7.10 contained a security vulnerability, which was caused by the use of hardcoded encryption keys for parameters...
EUVD-2017-18263
Malware in sbrugna...
EUVD-2018-5282
Malware in sbrugna...
EUVD-2018-5294
Malware in sbrugna...
EUVD-2018-5299
Malware in sbrugna...
EUVD-2018-5277
Malware in sbrugna...
EUVD-2018-5293
Malware in sbrugna...
EUVD-2018-5296
Malware in sbrugna...
EUVD-2020-20669
Malware in sbrugna...