The vulnerability of the HTTP-server of the microprogramming software for the multifunctional device RAVPower FileHub allows a hacker to execute arbitrary code with root privileges.

The vulnerability of the HTTP-server of the microprogramming-based multifunctional device RAVPower FileHub exists due to insufficient restrictions on the path name to the restricted directory, and the absence of restrictions on file downloads. Exploiting this vulnerability allows a malicious acto...

RAVPower Filehub Remote Code Execution Vulnerability

RAVPower FileHub is a multifunctional digital device from RAVPower USA. The device also functions as a card reader, USB storage, and NAS file server.HTTP Server is one of the ... A remote code execution vulnerability exists in RAVPower Filehub. A remote attacker can use this vulnerability to uplo...

CVE-2018-5997

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

CVE-2018-5997

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

Path traversal

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

CVE-2018-5997

An issue was discovered in the HTTP Server in RAVPower Filehub 2.000.056. Due to an unrestricted upload feature and a path traversal vulnerability, it is possible to upload a file on a filesystem with root privileges: this will lead to remote code execution as root...

CVE-2018-5997

The CVE-2018-5997 vulnerability affects RAVPower FileHub (firmware 2.000.056) HTTP Server, enabling an unrestricted upload combined with path traversal to write files on the filesystem with root privileges, leading to remote root code execution. Exploitation is evidenced by multiple sources (CNVD...

RAVPower FileHub Information Disclosure Vulnerability

The RAVPower FileHub is a multifunctional digital device from RAVPower USA. The device also functions as a card reader, USB storage, and NAS file server. A security vulnerability exists in RAVPower FileHub version 2.000.056. A remote attacker can exploit this vulnerability by sending a specially...

CVE-2018-5319

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

CVE-2018-5319

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

Cross site request forgery (csrf)

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

CVE-2018-5319

RAVPower FileHub 2.000.056 contains a remote information-disclosure vulnerability (memory disclosure) triggered by a crafted HTTP request. Impact: remote attackers can exfiltrate sensitive information. Public exploits exist (e.g., Exploit-DB, PacketStorm). No patch/version remediation details are...

CVE-2018-5319

RAVPower FileHub 2.000.056 allows remote users to steal sensitive information via a crafted HTTP request...

RAVPower 2.000.056 - Root Remote Code Execution Exploit

Exploit for hardware platform in category remote exploits """ Exploit Title: RAVPower - remote root Date: 23/01/2018 Exploit Authors: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5997 """...

RAVPower 2.000.056 - Root Remote Code Execution

RAVPower 2.000.056 - Root Remote Code Execution """ Exploit Title: RAVPower - remote root Date: 23/01/2018 Exploit Authors: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5997 """ import...

RAVPower 2.000.056 Memory Disclosure

""" Exploit Title: RAVPower - remote stack disclosure Date: 22/01/2018 Exploit Author: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5319 """ import socket import sys import re author =...

RAVPower 2.000.056 - Root Remote Code Execution

""" Exploit Title: RAVPower - remote root Date: 23/01/2018 Exploit Authors: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5997 """ import requests import time import telnetlib PATHPASSWD =...

RAVPower 2.000.056 - Memory Disclosure Exploit

Exploit for hardware platform in category dos / poc """ Exploit Title: RAVPower - remote stack disclosure Date: 22/01/2018 Exploit Author: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5319...

RAVPower 2.000.056 - Memory Disclosure

RAVPower 2.000.056 - Memory Disclosure """ Exploit Title: RAVPower - remote stack disclosure Date: 22/01/2018 Exploit Author: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5319 """ import...

RAVPower 2.000.056 - Memory Disclosure

""" Exploit Title: RAVPower - remote stack disclosure Date: 22/01/2018 Exploit Author: Daniele Linguaglossa Vendor Homepage: https://www.ravpower.com/ Software Link: https://www.ravpower.com/ Version: 2.000.056 Tested on: OSX CVE : CVE-2018-5319 """ import socket import sys import re author =...