2624 matches found
CVE-2026-47359: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API available since 4.20.0.0 and updateBackupRepository API introduced in 4.22.0.0 accept unsanitized command options f...
CVE-2026-71676
Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...
D-Link DNS NAS CVE-2024-10914 account_mgr.cgi RCE detect
Detects CVE-2024-10914 in D-Link ShareCenter NAS devices: unauthenticated command injection via /cgi-bin/accountmgr.cgi?cmd=cgiuseradd&name= DNS-320, DNS-320LW, DNS-325, DNS-340L and related EOL models. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2024-10914 — D-Link DNS NAS accountmgr.cgi...
CVE-2026-71676
Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...
CVE-2026-71676
Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...
EUVD-2026-61282
Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...
PT-2026-77309
Name of the Vulnerable Software and Affected Versions Open5GS version 2.7.0 Description A remote attacker can cause a denial of service through the ngap send to nas function located in src/amf/ngap-path.c. Recommendations At the moment, there is no information about a newer version that contains ...
CVE-2026-71676: Heap-based Buffer Overflow
Buffer Overflow vulnerability in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the NAS 5GS decoder chain, triggered when the message type byte of a NAS PDU is mutated...
CVE-2026-71676
A Heap-based Buffer Overflow vulnerability exists in Open5GS v.2.7.0 . A remote attacker can cause a denial of service by mutating the message type byte of a NAS PDU , which triggers the flaw within the NAS 5GS decoder chain . While the vulnerability allows for remote exploitation, the provided d...
PT-2026-77294
Name of the Vulnerable Software and Affected Versions Open5GS version 2.7.0 Description A buffer overflow occurs in the NAS 5GS decoder chain when the message type byte of a NAS PDU Protocol Data Unit is mutated. This allows a remote attacker to cause a denial of service. Recommendations At the...
CVE-2026-19983
A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...
CVE-2026-19983
A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...
EUVD-2026-60046
A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...
CVE-2026-19983
GL.iNet devices (A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000, XE3000) running 4.8.x are affected by a vulnerability in NAS Command Service due to improper processing of /usr/bin/gl_nas_sys, enabling remote OS command injection. The issue allows a remote attacker to execute arbitrary com...
PT-2026-73202
A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/gl nas sys of the component NAS Command Service. The manipulation results in os command injection. The attack may be...
CVE-2026-19983: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was detected in GL.iNet A1300, AX1800, AXT1800, MT2500, MT3000, MT6000, X3000 and XE3000 4.8.x. This issue affects some unknown processing of the file /usr/bin/glnassys of the component NAS Command Service. The manipulation results in os command injection. The attack may be launch...
Buffalo LinkStation - Arbitrary File Read (CVE-2025-26167)
Buffalo LinkStation exposes /rpc/cat/?inter=1 without authentication, allowing remote attackers to read arbitrary files e.g. password hashes. !/usr/bin/env python3 -- coding: utf-8 -- """Buffalo LinkStation unauthenticated arbitrary file read via /rpc/cat/ CVE-2025-26167.""" import re from...
TerraMaster NAS - makecvs.php Info Disclosure (CVE-2019-18385)
Detects CVE-2019-18385 by requesting /include/makecvs.php?Event=http and looking for Client-PORT / Client-IP headers in the response. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster NAS makecvs.php Event=http info disclosure CVE-2019-18385.""" from kittysploit import from...
Zyxel NAS - Auth Bypass Indicator (CVE-2023-27992 family)
Detects Zyxel NAS authentication bypass via /cmd,/ck6fup6/zylogmain/configuremailsyslog, indicating exposure to the Jun/Nov 2023 vulnerability set including pre-auth command injection CVE-2023-27992 and related issues. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NAS authentication bypass...
