CVE-2017-7631

Cross-site scripting XSS vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...

CVE-2017-7632

Cross-site scripting XSS vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...

CVE-2017-7630

CVE-2017-7630 affects QNAP QTS 4.2.6 (build 20171026) and QTS 4.3.3 (build 20170727) and earlier. The vulnerability allows remote attackers to disclose potentially sensitive information by requesting sysinfoReq.cgi, specifically firmware version and running services. The connected sources confirm...

CVE-2017-7632

CVE-2017-7632 is a documented XSS vulnerability in QNAP QTS File Station affecting 4.2.6 (build 20171026) and 4.3.3 (build 20170727) and earlier. The issue allows remote attackers to inject arbitrary web script or HTML. Technical references in the connected documents include vendor advisories (NA...

CVE-2017-7631

CVE-2017-7631 is a cross-site scripting (XSS) vulnerability in QNAP’s File Station share link feature. Affects QNAP devices running File Station on QTS 4.3.3 (build 20170727) and earlier, and QNAP 4.2.6 (build 20171026) as cited. The root cause described across sources is that remote attackers ca...

PT-2018-8409

Name of the Vulnerable Software and Affected Versions QNAP QTS versions 4.2.6 build 20171026 and earlier, QTS 4.3.3 build 20170727 and earlier Description The issue allows remote attackers to obtain potentially sensitive information, such as the firmware version and running services, via a reques...

CVE-2017-7632: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML...

PT-2018-8411

Name of the Vulnerable Software and Affected Versions QNAP QTS versions 4.2.6 build 20171026 and earlier, QTS 4.3.3 build 20170727 and earlier Description A cross-site scripting XSS issue exists in the File Station of QNAP QTS, allowing remote attackers to inject arbitrary web script or HTML. Thi...

CVE-2017-7630: Exposure of Sensitive Information to an Unauthorized Actor

QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information firmware version and running services via a request to sysinfoReq.cgi...

QNAP QTS Multiple RCE Vulnerabilities

QNAP QTS is prone to multiple remote code execution RCE vulnerabilities. This VT was deprecated since it is a duplicate of QNAP QTS 4.2.6 build 20171208, 4.3.3.x 4.3.3.0396 build 20171205, 4.3.4.x 4.3.4.0411 build 20171208 Multiple Vulnerabilities OID: 1.3.6.1.4.1.25623.1.0.107274...

Pre-auth Remote Code Execution exploit for QNAP QTS

!/usr/bin/env python -- coding: iso-8859-15 -- Pre-auth Remote Code Execution exploit for QNAP QTS 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 2017111 Just a quick dirty RCE PoC to make your QNAP sing "XMAS" in morse. Author: Andrea Palazzo @cogitoergor00t E-mail:...

CVE-2017-17032

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

CVE-2017-17031

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

CVE-2017-17030

A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

Buffer overflow

A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

Buffer overflow

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

Buffer overflow

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

Buffer overflow

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

CVE-2017-17027

A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...

CVE-2017-17029

A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...