terraMaster-CVE-2022-24990

terraMaster-CVE-2022-24990 Tool Introduction A rapid exploitation tool for CVE-2022-24990. Novice code. Feel free to raise issues if you have any problems. Usage main -u http://127.0.0.1:8181 -t pocexp poc Only detect information disclosure vulnerabilities. exp Attempt to upload WebShell...

TerraMaster-TOS-CVE-2020-15568

TerraMaster TOS CVE-2020-15568 Repository for CVE-2020-15568 Metasploit module Vulnerable Application Description A dynamic class method invocation vulnerability exists in file include/exportUser.php which leads to executing remote commands on TerraMaster devices with root privileges. The...

CVE-2022-24990

CVE-2022-24990 説明 - CVE-2022-24990 の実証コード: PHP オブジェクトインスタンス化を介した TerraMaster TOS の未認証リモートコマンド実行。 - 作成者: antx, 日付: 2022-04-12。 詳細 - この脆弱性により、リモート攻撃者が対象システム上で任意のコマンドを実行できる可能性があります。 - 脆弱性は、api.php スクリプト内の webNasIPS...

TerraMaster TOS < 4.2.06 - User Enumeration

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...

TerraMaster TOS <.1.29 - Remote Code Execution

TerraMaster TOS before 4.1.29 has invalid parameter checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter. id:...

TerraMaster TOS < 4.2.30 Server Information Disclosure

TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure. id: CVE-2022-24990 info: name: TerraMaster TOS 4.2.30 Server Information Disclosure author: dwisiswant0 severity: high description: TerraMaster NAS devices running TOS prior to version 4.2.30 are...

CVE-2020-15568

CVE-2020-15568 CVE-2020-15568 用の手軽で簡単な POC。 未テストですが、こちらの情報に基づいています: https://ssd-disclosure.com/ssd-advisory-terramaster-os-exportuser-php-remote-code-execution/...

CVE-2022-24990-TerraMaster-TOS--PHP-

このリポジトリには README がありません。...

CVE-2022-24990

CVE-2022-24990 CVE-2022-24990 TerraMaster TOS unauthenticated RCE via PHP Object Instantiation Usage Vulnerability Detection. root@kitploit: python CVE-2022-24990.py -u http://127.0.0.1:8080 Upload a PHP webshell. root@kitploit: python CVE-2022-24990.py -a http://127.0.0.1:8080 Reference...

TerraMaster TOS - Unauthenticated Remote Command Execution

TerraMaster TOS = 4.2.06 is susceptible to a remote code execution vulnerability which could allow remote unauthenticated attackers to inject OS commands via /include/makecvs.php via the Event parameter. id: CVE-2020-28188 info: name: TerraMaster TOS - Unauthenticated Remote Command Execution...

CVE-2019-18383

An issue was discovered on TerraMaster FS-210 4.0.19 devices. One can download backup files remotely from terramasterTNAS-00E43Aconfigbackup.bin without permission...

CVE-2019-18385

An issue was discovered on TerraMaster FS-210 4.0.19 devices. An unauthenticated attacker can download log files via the include/makecvs.php?Event= substring...

EUVD-2018-5282

Malware in sbrugna...

EUVD-2018-5277

Malware in sbrugna...

EUVD-2021-17067

Malware in sbrugna...

EUVD-2017-18263

Malware in sbrugna...

EUVD-2018-5293

Malware in sbrugna...

EUVD-2018-5299

Malware in sbrugna...

EUVD-2018-5296

Malware in sbrugna...

EUVD-2018-5294

Malware in sbrugna...