383 matches found
CVE-2022-24990
CVE-2022-24990 CVE-2022-24990 TerraMaster TOS RCE no autenticado mediante instanciación de objetos PHP Uso Detección de vulnerabilidad. python CVE-2022-24990.py -u http://127.0.0.1:8080 Subir una webshell PHP. python CVE-2022-24990.py -a http://127.0.0.1:8080 Referencia...
TerraMaster-TOS-CVE-2020-15568
TerraMaster TOS CVE-2020-15568 Repositorio para el módulo de Metasploit CVE-2020-15568 Aplicación vulnerable Descripción Existe una vulnerabilidad de invocación dinámica de métodos de clase en el archivo include/exportUser.php que permite ejecutar comandos remotos en dispositivos TerraMaster con...
CVE-2022-24990
CVE-2022-24990 Descripción - POC para CVE-2022-24990: Ejecución remota de comandos no autenticada en TerraMaster TOS mediante instanciación de objetos PHP. - creado por antx el 2022-04-12. Detalle - La vulnerabilidad permite a un atacante remoto ejecutar comandos arbitrarios en el sistema...
TerraMaster TOS < 4.2.30 Server Information Disclosure
TerraMaster NAS devices running TOS prior to version 4.2.30 are vulnerable to information disclosure. id: CVE-2022-24990 info: name: TerraMaster TOS 4.2.30 Server Information Disclosure author: dwisiswant0 severity: high description: TerraMaster NAS devices running TOS prior to version 4.2.30 are...
Cheatsheet-God
diff UPDATE: Added my huge link of bookmarks / references ❤️ ¿Tienes un millón de marcadores guardados? ¿Todos esos marcadores contienen información única? ¿Repos de GitHub marcados con estrella para más tarde? Bueno, esto es una recopilación de todos estos recursos en un único repositorio conocid...
TerraMaster TOS < 4.2.06 - User Enumeration
User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php. id: CVE-2020-28185 info: name: TerraMaster TOS 4.2.06 - User Enumeration author: pussycat0x severity:...
TerraMaster TOS <.1.29 - Remote Code Execution
TerraMaster TOS before 4.1.29 has invalid parameter checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with for example OS commands in the opt parameter. id:...
CVE-2022-24990-TerraMaster-TOS--PHP-
Este repositorio no tiene un README...
CVE-2021-26380: Integer Overflow or Wraparound
A compromised Trusted OS TOS driver could issue a malformed call that could potentially allow memory access outside the intended range resulting in loss of integrity...
PropertyGuru AgentNet Singapore App 安全漏洞
The PropertyGuru AgentNet Singapore App is a mobile application used by PropertyGuru in Singapore as an real estate agency. The PropertyGuru AgentNet Singapore App versions prior to 23.7.10 contained a security vulnerability, which was caused by the use of hardcoded encryption keys for parameters...
EUVD-2018-5296
Malware in sbrugna...
EUVD-2018-5294
Malware in sbrugna...
EUVD-2018-5282
Malware in sbrugna...
EUVD-2018-5277
Malware in sbrugna...
EUVD-2018-5293
Malware in sbrugna...
EUVD-2018-5299
Malware in sbrugna...
EUVD-2017-18263
Malware in sbrugna...
EUVD-2018-5295
Malware in sbrugna...