Seagate BlackArmor NAS - Command Injection

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php. id: CVE-2014-3206 info: name: Seagate BlackArmor NAS - Command Injection author: gy741...

Seagate BlackArmor NAS 220 - localJob.php RCE Detection

Detects command injection in /backupmgt/localJob.php?session=fail;++file%00 on Seagate BlackArmor NAS 220 Greenbone Jul 2021 active check. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate BlackArmor NAS 220 backupmgt localJob.php command injection.""" import re import secrets from kittysploit...

Seagate BlackArmor NAS 220 - localJob.php Command Injection

Exploits command injection in /backupmgt/localJob.php on Seagate BlackArmor NAS 220 by appending OS commands after session=fail and reading stdout from /backupmgt/. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate BlackArmor NAS 220 backupmgt localJob.php...

EUVD-2013-6724

Malware in sbrugna...

Seagate BlackArmor NAS RCE Vulnerability (Jul 2021)

Seagate BlackArmor NAS is prone to a remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program i...

Seagate BlackArmor NAS sg2000-2000.1331 Command Injection

Exploit Title: Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection Date: 15.07.2021 Discovered by: Jeroen - IT Nerdbox Exploit Author: Metin Yunus Kandemir Version: sg2000-2000.1331 Vendor Homepage: https://www.seagate.com/ Software Link:...

Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection Exploit

Exploit Title: Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection Discovered by: Jeroen - IT Nerdbox Exploit Author: Metin Yunus Kandemir Version: sg2000-2000.1331 Vendor Homepage: https://www.seagate.com/ Software Link:...

Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection

Exploit Title: Seagate BlackArmor NAS sg2000-2000.1331 - Command Injection Date: 15.07.2021 Discovered by: Jeroen - IT Nerdbox Exploit Author: Metin Yunus Kandemir Version: sg2000-2000.1331 Vendor Homepage: https://www.seagate.com/ Software Link:...

Seagate BlackArmor NAS Code Execution

The vulnerability of the localJob.php /backupmgt/localJob.php and preconnectcheck.php backupmgmt/preconnectcheck.php web interfaces of the Seagate BlackArmor NAS software solution is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute...

Seagate BlackArmor NAS Hardcoded Credentials Vulnerability

Seagate BlackArmor NAS is a network storage server from Seagate USA that provides layered protection, data incremental and system backup and recovery of business critical data. A security vulnerability exists in the backupmgt/preconnectcheck.php file in Seagate BlackArmor NAS, which stems from th...

Seagate BlackArmor NAS Remote Code Execution Vulnerability

Seagate BlackArmor NAS is a network storage server from Seagate USA that provides layered protection, data incremental and system backup and recovery of business critical data. A security vulnerability exists in the Seagate BlackArmor NAS. A remote attacker can exploit the vulnerability by sendin...

Hardcoded credentials

backupmgt/preconnectcheck.php in Seagate BlackArmor NAS contains a hard-coded password of '!@$$%FREDESWWSED' for a backdoor user...

CVE-2014-3205

The CVE-2014-3205 issue affects Seagate BlackArmor NAS in backupmgt/pre_connect_check.php, where a backdoor user is authenticated using a hard-coded password '!~@##$$%FREDESWWSED'. The vulnerability is documented across multiple sources (NVD entry, CNVD/CVE records, and CNVD Chinese advisory) and...

CVE-2014-3206

CVE-2014-3206 affects Seagate BlackArmor NAS. It allows remote attackers to execute arbitrary code by sending the session parameter to /backupmgt/localJob.php or the auth_name parameter to /backupmgmt/pre_connect_check.php, enabling remote code execution on the device. Root cause: improper input ...

CVE-2014-3206: Improper Input Validation

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

CVE-2014-3205: Use of Hard-coded Credentials

backupmgt/preconnectcheck.php in Seagate BlackArmor NAS contains a hard-coded password of '!@$$%FREDESWWSED' for a backdoor user...

CVE-2013-6924

Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php...

CVE-2013-6924: Improper Neutralization of Special Elements used in a Command

Seagate BlackArmor NAS devices with firmware sg2000-2000.1331 allow remote attackers to execute arbitrary commands via shell metacharacters in the ip parameter to backupmgt/getAlias.php...

Seagate BlackArmor NAS device static adminstrator Password Reset vulnerability

Seagate BlackArmor NAS 路由器可以在没有任何授权下复位管理员密码，并且可以在新手引导下重置为任意密码 可以直接访问 http://目标IP地址/d41d8cd98f00b204e9800998ecf8427e.php 这个文件，然后就可以重置管理员密码。...

Seagate BlackArmor NAS sg2000-2000.1331 - Cross Site Request Forgery

No description provided by source. Exploit Title: Seagate BlackArmor NAS - Cross Site Request Forgery Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ Software Link:...