QuantaStor alertConfigSet smtpPassword command injection

Authenticated JSON-RPC alertConfigSet writes an unsanitized smtpPassword into the root qsservice alert email shell command; alertRaise triggers execution as root delayed async dispatch. !/usr/bin/env python3 -- coding: utf-8 -- """OSNexus QuantaStor alertConfigSet smtpPassword command injection...

OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE — Detect

Fingerprint / reachability check for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE !/usr/bin/env python3 -- coding: utf-8 -- """Detection for OSNexus QuantaStor — alertConfigSet smtpPassword Command Injection → Root RCE""" from kittysploit import from...

CVE-2021-42079: Server-Side Request Forgery (SSRF)

An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests. POC Step 1: Prepare the SSRF with a request like this: GET...