34 matches found
PT-2026-60339
Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability...
PT-2026-60338
Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability...
Synology DiskStation DS925+ MailPlus Improper Restriction of Communication Channel to Intended Endpoints Vulnerability
This vulnerability allows network-adjacent attackers to access the Redis instance on affected installations of Synology DiskStation DS925+ devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MailPlus firewall rules. The...
Synology DiskStation DS925+ MailPlus Redis Weak Cryptography for Passwords Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology DiskStation DS925+ devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MailPlus Redis instance. When...
PT-2026-53688
Name of the Vulnerable Software and Affected Versions Synology MailPlus Server versions prior to 4.0.1-31663 Description A critical flaw allows remote attackers to read and write arbitrary files and access internal services, which likely leads to remote code execution RCE, a state where an attack...
EUVD-2017-7309
Malware in sbrugna...
EUVD-2017-7947
Malware in sbrugna...
EUVD-2018-5244
Malware in sbrugna...
Synology MailPlus Server Resource Management Error Vulnerability
Synology MailPlus Server is an email service suite from Synology Inc. of Taiwan, China. The product supports managing user accounts, email records, and more. A resource management error vulnerability exists in Synology MailPlus Server. An attacker can exploit the vulnerability to cause a denial o...
CVE-2018-13296
Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation...
Authentication flaw
Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation...
CVE-2018-13296
Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation...
CVE-2018-13296
Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation...
CVE-2018-13296
CVE-2018-13296 affects Synology MailPlus Server; a TLS configuration flaw allows DoS via client-initiated renegotiation in versions before 2.0.5-0606. The issue is documented with CVSS v2/v3 scores (5.0/7.5) and a DoS impact. No exploitation details or fixes are provided in the connected document...
CVE-2018-13296
Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation...
CVE-2018-13296: Uncontrolled Resource Consumption
Uncontrolled resource consumption vulnerability in TLS configuration in Synology MailPlus Server before 2.0.5-0606 allows remote attackers to conduct denial-of-service attacks via client-initiated renegotiation...
PT-2019-8961
Name of the Vulnerable Software and Affected Versions Synology MailPlus Server versions prior to 2.0.5-0606 Description The issue is related to an uncontrolled resource consumption vulnerability in the TLS configuration, which allows remote attackers to conduct denial-of-service attacks via...
Synology MailPlus Server Cross-Site Scripting Vulnerability
Synology MailPlus Server is a mail server solution for businesses. A cross-site scripting vulnerability exists in the User Policy editor in Synology MailPlus Server. A remote authenticated user can exploit the vulnerability to inject arbitrary HTML via the name parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in User Policy editor in Synology MailPlus Server before 1.4.0-0415 allows remote authenticated users to inject arbitrary HTML via the name parameter...