CVE-2015-7262

CVE-2015-7262 affects QNAP iArtist Lite (before 1.4.54) as distributed with Signage Station (before 2.0.1). A privileged execution flaw lets remote authenticated users register an executable that is run in a privileged context after a reboot, effectively gaining SYSTEM-level access. Root cause li...

CVE-2015-7262

QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot...

CVE-2015-6036

QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request...

CVE-2015-6036

CVE-2015-6036 affects QNAP Signage Station prior to version 2.0.1. An unauthenticated attacker can bypass authentication by sending a spoofed HTTP request, enabling remote upload of files to the server. The vulnerability is documented across multiple sources (NVD description aligns with the bypas...

QNAP Systems iArtist Lite Command Execution Vulnerability

QNAP Systems iArtist Lite is a suite of ad editing software for QNAP NAS. A security vulnerability exists in QNAP Systems iArtist Lite that allows remote attackers to execute arbitrary binary commands with SYSTEM privileges...

QNAP Systems iArtist Lite Hardcoding Vulnerability

QNAP Systems iArtist Lite is a suite of ad editing software for QNAP NAS. QNAP Systems iArtist Lite uses hard-coded FTP accounts and passwords, allowing remote attackers to sniff the network for FTP transfer data...

CVE-2015-6022: Undefined Security Weakness

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL...

PT-2016-3703

Name of the Vulnerable Software and Affected Versions QNAP Signage Station versions prior to 2.0.1 Description The issue allows remote attackers to bypass authentication and upload files via a spoofed HTTP request. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to...

PT-2016-3702

Name of the Vulnerable Software and Affected Versions QNAP Signage Station versions prior to 2.0.1 Description The issue allows remote authenticated users to execute arbitrary code by uploading an executable file and then accessing it via an unspecified URL. This is due to an unrestricted file...

PT-2016-3745

Name of the Vulnerable Software and Affected Versions QNAP iArtist Lite versions prior to 1.4.54 QNAP Signage Station versions prior to 2.0.1 Description The issue allows remote authenticated users to gain privileges by registering an executable file and waiting for it to be run in a privileged...

CVE-2015-7262: Undefined Security Weakness

QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot...

CVE-2015-6036: Undefined Security Weakness

QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request...

QNAP Systems Signage Station Authentication Bypass Vulnerability

QNAP Systems Signage Station is a suite of ad creation applications for QNAP NAS. An authentication bypass vulnerability exists in QNAP Systems Signage Station, which allows remote attackers to perform unauthorized actions by sending spoofed HTTP requests...

PT-2016-1318

Name of the Vulnerable Software and Affected Versions QNAP Signage Station versions prior to 2.0.1 QNAP iArtist Lite versions prior to 1.4.54 Description The issue exists due to hardcoded registration data in the FTP service of the affected software. This allows a remote attacker to gain access t...

QNAP Systems Signage Station Script Execution Vulnerability

QNAP Systems Signage Station is a suite of ad creation applications for QNAP NAS. A security vulnerability in QNAP Systems Signage Station allows a remote attacker to upload malicious files using predictable URLs and execute scripts in the files with administrator privileges...

CVE-2015-7261: Undefined Security Weakness

The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21...

QNap QVR Client 5.1.0.11290 - Crash PoC

Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : email protected Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...

QNap QVR Client 5.1.0.11290 - Crash (PoC)

!/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...

QNap QVR Client 5.1.0.11290 - Crash (PoC)

QNap QVR Client 5.1.0.11290 - Crash PoC !/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...

QNAP Systems QNAP QTS Directory Traversal Vulnerability

QNAP Systems QNAP QTS is a Turbo NAS operating system from QNAP Systems. A directory traversal vulnerability exists in QNAP Systems QNAP QTS. When AFP is enabled in the program, a remote attacker can read or write arbitrary files by submitting a special directory traversal request while accessing...