Seagate BlackArmor NAS 220 - localJob.php RCE Detection

Detects command injection in /backupmgt/localJob.php?session=fail;++file%00 on Seagate BlackArmor NAS 220 Greenbone Jul 2021 active check. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate BlackArmor NAS 220 backupmgt localJob.php command injection.""" import re import secrets from kittysploit...

Seagate BlackArmor NAS 220 - localJob.php Command Injection

Exploits command injection in /backupmgt/localJob.php on Seagate BlackArmor NAS 220 by appending OS commands after session=fail and reading stdout from /backupmgt/. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """Seagate BlackArmor NAS 220 backupmgt localJob.php...

Seagate BlackArmor NAS Code Execution

The vulnerability of the localJob.php /backupmgt/localJob.php and preconnectcheck.php backupmgmt/preconnectcheck.php web interfaces of the Seagate BlackArmor NAS software solution is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute...

Code injection

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

CVE-2014-3206: Improper Input Validation

Seagate BlackArmor NAS allows remote attackers to execute arbitrary code via the session parameter to localhost/backupmgt/localJob.php or the authname parameter to localhost/backupmgmt/preconnectcheck.php...

PT-2014-2000

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS affected versions not specified Description The issue is related to insufficient input validation in the localJob.php and pre connect check.php scripts of the Seagate BlackArmor NAS web interface. This can be exploited b...