CVE-2025-58465

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

CVE-2025-58463

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

EUVD-2025-38287

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

EUVD-2025-38269

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-58465

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

CVE-2025-58465

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

CVE-2025-58463

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-58463

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-58463 Download Station

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-58463

CVE-2025-58463 affects QNAP Download Station and is a relative path traversal vulnerability. The issue can be exploited by a remote attacker who has an administrator account to read contents of unexpected files or system data. The vulnerability is triggered via a path traversal flaw in the downlo...

CVE-2025-58463 Download Station

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-58465 Download Station

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

CVE-2025-58465 Download Station

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

CVE-2025-58465

The CVE-2025-58465 entry describes a cross-site scripting (XSS) vulnerability in QNAP Download Station. A remote attacker who gains a user account could exploit the flaw to bypass security mechanisms or read application data. Affected software is Download Station; vulnerable component/process is ...

QNAP Download Station 安全漏洞

QNAP Download Station is a web-based download tool from Taiwan, China-based QNAP Technology QNAP. A security vulnerability exists in QNAP Download Station, which originates from relative path traversal and could result in reading unexpected files or system data...

QNAP Download Station 跨站脚本漏洞

QNAP Download Station is a web-based download tool from Taiwan, China-based QNAP Technology QNAP. A cross-site scripting vulnerability exists in QNAP Download Station, which stems from susceptibility to cross-site scripting attacks that could result in bypassing security mechanisms or reading...

PT-2025-45435

Name of the Vulnerable Software and Affected Versions Download Station versions prior to 5.10.0.304 Download Station versions prior to 5.10.0.305 Description A relative path traversal issue exists in Download Station. Successful exploitation by a remote attacker with administrator privileges coul...

PT-2025-45437

Name of the Vulnerable Software and Affected Versions Download Station versions prior to 5.10.0.304 Description A cross-site scripting XSS issue exists in Download Station. A remote attacker who has obtained a user account can potentially exploit this issue to circumvent security measures or acce...

EUVD-2015-6849

Malware in sbrugna...

EUVD-2017-2784

Malware in sbrugna...