QNAP Turbo NAS TS-1279U-RP Multiple Path Injection

No description provided by source. Exploit Title: QNAP Turbo NAS Multiple Path Injection Date: 2012-09-04 Exploit Author: Andrea Fabrizi Vendor Homepage: http://www.qnap.com/ Version: = 3.7.3 build 20120801 Tested on: QNAP TS-1279U-RP This vulnerability has been discovered on QNAP TS-1279U-RP, bu...

NAS Uploader 1.0 & 1.5 - Remote File Upload Vulnerability

No description provided by source. | | NAS Uploader V1.0&1.5 Remote File Upload Vulnerability | | Author : ViRuSMaN | | Contact : [email protected] | | Home : Islam-Attack.CoM , HackTeach.OrG | | Download : http://www.nasuploader.com/nasuploaderv10packdemo.php |...

Seagate BlackArmor NAS sg2000-2000.1331 - Remote Command Execution

No description provided by source. Exploit Title: Seagate BlackArmor NAS - Remote Command Execution Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ http://www.seagate.com/ Software Link:...

Seagate BlackArmor NAS sg2000-2000.1331 - Multiple Persistent Cross Site Scripting Vulnerabilities

No description provided by source. Exploit Title: Seagate BlackArmor NAS - Multiple Persistent Cross Site Scripting Vulnerabilities Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ http://www.seagate.com/ Software Link:...

Unauthorized Access to Root NFS Export on EMC Celerra NAS Appliance

No description provided by source...

Seagate BlackArmor NAS - Multiple Vulnerabilities

No description provided by source. Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities Date: 2/17/14 Exploit Author: Shayan Sadigh twitter.com/r1pplex | [email protected] Vendor Homepage: http://www.seagate.com/external-hard-drives/network-storage/ Version: All BlackArmor NAS...

Seagate BlackArmor NAS sg2000-2000.1331 - Cross Site Request Forgery

No description provided by source. Exploit Title: Seagate BlackArmor NAS - Cross Site Request Forgery Google Dork: N/A Date: 04-01-2014 Exploit Author: Jeroen - IT Nerdbox Vendor Homepage: http://www.seagate.com/ Software Link:...

Raidsonic NAS Devices Unauthenticated Remote Command Execution

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

GLSA-201406-22 : Network Audio System: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201406-22 Network Audio System: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Network Audio System. Please review the CVE identifiers referenced below for details. Impact : A context-dependent attacker...

Hacker Exploits NAS Vulns to Mine $620K in Dogecoin

A hacker, well-versed in malware and exploit development, took advantage of vulnerabilities in Synology network attached storage boxes popular with home users to mine more than $600,000 worth of the digital currency Dogecoin. Researchers Pat Litke and David Shear of Dell SecureWorks’ Counter Thre...

PT-2014-5172

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE version 1.2.1 patch 2 and earlier Description The issue arises from improper handling of deadlock conditions during the reception of crafted RADIUS accounting packets from multiple NAS devices. This allows...

Seagate BlackArmor NAS - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities Date: 2/17/14 Exploit Author: Shayan Sadigh twitter.com/r1pplex | Vendor Homepage: http://www.seagate.com/external-hard-drives/network-storage/ Version: All BlackArmor NAS...

PT-2014-2001

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS affected versions not specified Description The issue is related to the backupmgt/pre connect check.php component of the Seagate BlackArmor NAS, which contains a hard-coded password for a backdoor user. This could allow ...

PT-2014-2000

Name of the Vulnerable Software and Affected Versions Seagate BlackArmor NAS affected versions not specified Description The issue is related to insufficient input validation in the localJob.php and pre connect check.php scripts of the Seagate BlackArmor NAS web interface. This can be exploited b...

Seagate BlackArmor NAS - Multiple Vulnerabilities

Seagate BlackArmor NAS - Multiple Vulnerabilities Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities Date: 2/17/14 Exploit Author: Shayan Sadigh twitter.com/r1pplex | Vendor Homepage: http://www.seagate.com/external-hard-drives/network-storage/ Version: All BlackArmor NAS devices...

Seagate BlackArmor NAS - Multiple Vulnerabilities

Exploit Title: Seagate BlackArmor NAS Multiple Vulnerabilities Date: 2/17/14 Exploit Author: Shayan Sadigh twitter.com/r1pplex | Vendor Homepage: http://www.seagate.com/external-hard-drives/network-storage/ Version: All BlackArmor NAS devices.. Tested on: Linux CVE : N/A 1. some sort of backdoor...

CVE-2013-3069

Multiple cross-site scripting XSS vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the 1 UserName or 2 Password to the NAS User Setup page, 3 deviceName to USBadvanced.htm, or 4 Network Key to the Wireless Setup...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the 1 UserName or 2 Password to the NAS User Setup page, 3 deviceName to USBadvanced.htm, or 4 Network Key to the Wireless Setup...

CVE-2013-3069

Multiple cross-site scripting XSS vulnerabilities in NETGEAR WNDR4700 with firmware 1.0.0.34 allow remote authenticated users to inject arbitrary web script or HTML via the 1 UserName or 2 Password to the NAS User Setup page, 3 deviceName to USBadvanced.htm, or 4 Network Key to the Wireless Setup...

CVE-2013-3069

CVE-2013-3069 concerns multiple XSS flaws in NETGEAR WNDR4700 firmware 1.0.0.34. The vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML through four vectors: (1) UserName or (2) Password on the NAS User Setup page, (3) deviceName on USB_advanced.htm, and (4) N...