631 matches found
WD NAS - language_configuration RCE (CVE-2018-18472)
Exploits backtick injection in PUT /api/1.0/rest/languageconfiguration on WD My Cloud / My Book Live. Output is written under /var/www and fetched via HTTP. !/usr/bin/env python3 -- coding: utf-8 -- """Western Digital NAS languageconfiguration RCE CVE-2018-18472 — opens execute session.""" import...
WD NAS - language_configuration RCE Detection (CVE-2018-18472)
Detects CVE-2018-18472 by injecting id via PUT /api/1.0/rest/languageconfiguration backticks and fetching the written output file. !/usr/bin/env python3 -- coding: utf-8 -- """Western Digital My Cloud / My Book Live languageconfiguration RCE CVE-2018-18472.""" import re from kittysploit import fr...
WD My Cloud Panel - Detect
Detects WD My Cloud Panel - Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects WD My Cloud Panel - Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'WD My Cloud Panel - Detect', 'description': 'Detect...
CVE-2019-18929
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users including guest accounts to remotely execute arbitrary code via a downloadmgr.cgi stack-based buffer overflow...
CVE-2019-18930
Western Digital My Cloud EX2 Ultra firmware 2.31.183 allows web users including guest account to remotely execute arbitrary code via a stack-based buffer overflow. There is no size verification logic in one of functions in libscheddl.so, and downloadmgr.cgi makes it possible to enter large-sized...
CVE-2019-18931
Western Digital My Cloud EX2 Ultra firmware 2.31.195 allows a Buffer Overflow with Extended Instruction Pointer EIP control via crafted GET/POST parameters...
CVE-2020-12830
Addressed multiple stack buffer overflow vulnerabilities that could allow an attacker to carry out escalation of privileges through unauthorized remote code execution in Western Digital My Cloud devices before 5.04.114...
CVE-2020-10951
Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages...
Western Digital My Cloud Multiple Products Multiple Vulnerabilities (WDC-25009)
Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EUVD-2020-21356
Malware in sbrugna...
EUVD-2021-22846
Malware in sbrugna...
EUVD-2021-26644
Malware in sbrugna...
EUVD-2021-22844
Malware in sbrugna...
EUVD-2019-19304
Malware in sbrugna...
EUVD-2019-8603
Malware in sbrugna...
EUVD-2020-5112
Malware in sbrugna...
EUVD-2020-29820
Malware in sbrugna...
EUVD-2020-3355
Malware in sbrugna...