4041 matches found
CVE-2015-7262
CVE-2015-7262 affects QNAP iArtist Lite (before 1.4.54) as distributed with Signage Station (before 2.0.1). A privileged execution flaw lets remote authenticated users register an executable that is run in a privileged context after a reboot, effectively gaining SYSTEM-level access. Root cause li...
CVE-2015-7261
CVE-2015-7261 affects QNAP iArtist Lite before 1.4.54 (bundled with Signage Station before 2.0.1). The FTP service contains hardcoded credentials, enabling remote access via TCP port 21. Root cause is hard-coded FTP accounts/passwords in iArtist Lite used by Signage Station; impact is unauthorize...
CVE-2015-6036
CVE-2015-6036 affects QNAP Signage Station prior to version 2.0.1. An unauthenticated attacker can bypass authentication by sending a spoofed HTTP request, enabling remote upload of files to the server. The vulnerability is documented across multiple sources (NVD description aligns with the bypas...
CVE-2015-6036
QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request...
CVE-2015-7261
The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21...
CVE-2015-7262
QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot...
QNAP Systems Signage Station Script Execution Vulnerability
QNAP Systems Signage Station is a suite of ad creation applications for QNAP NAS. A security vulnerability in QNAP Systems Signage Station allows a remote attacker to upload malicious files using predictable URLs and execute scripts in the files with administrator privileges...
QNAP Systems iArtist Lite Command Execution Vulnerability
QNAP Systems iArtist Lite is a suite of ad editing software for QNAP NAS. A security vulnerability exists in QNAP Systems iArtist Lite that allows remote attackers to execute arbitrary binary commands with SYSTEM privileges...
QNAP Systems Signage Station Authentication Bypass Vulnerability
QNAP Systems Signage Station is a suite of ad creation applications for QNAP NAS. An authentication bypass vulnerability exists in QNAP Systems Signage Station, which allows remote attackers to perform unauthorized actions by sending spoofed HTTP requests...
QNAP Systems iArtist Lite Hardcoding Vulnerability
QNAP Systems iArtist Lite is a suite of ad editing software for QNAP NAS. QNAP Systems iArtist Lite uses hard-coded FTP accounts and passwords, allowing remote attackers to sniff the network for FTP transfer data...
QNap QVR Client 5.1.0.11290 - Crash PoC
Exploit for windows platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : email protected Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...
QNap QVR Client 5.1.0.11290 - Crash (PoC)
!/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...
QNap QVR Client 5.1.0.11290 - Crash (PoC)
QNap QVR Client 5.1.0.11290 - Crash PoC !/usr/bin/env python -- coding: utf-8 -- Exploit Title : QNap QVR Client 5.1.0.11290 Crash PoC Discovery by : Luis Martínez Email : [email protected] Discovery Date : 05/11/2015 Vendor Homepage: http://www.qnapsecurity.com/n/en/ Software Link :...
QNAP Systems QNAP QTS Directory Traversal Vulnerability
QNAP Systems QNAP QTS is a Turbo NAS operating system from QNAP Systems. A directory traversal vulnerability exists in QNAP Systems QNAP QTS. When AFP is enabled in the program, a remote attacker can read or write arbitrary files by submitting a special directory traversal request while accessing...
CVE-2015-6003
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X 1 user or 2 guest account...
Directory traversal
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X 1 user or 2 guest account...
CVE-2015-6003
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X 1 user or 2 guest account...
CVE-2015-6003
CVE-2015-6003 affects QNAP QTS (pre-4.1.4 build 0910 and pre-4.2.0 RC2 build 0910) where AFP enables a path traversal flaw allows remote attackers with OS X user or guest accounts to read/write arbitrary files. Root cause: directory traversal in AFP handling enables access due to insufficient pat...
QNAP QTS is vulnerable to a path traversal attack when used with the AFP protocol and OS X
Overview QNAP QTS is a Network-Attached Storage NAS system. The QNAP QTS is vulnerable to a path traversal attack when used with the AFP protocol and OS X. Description CWE-23: Relative Path Traversal - CVE-2015-6003 When the Apple Filing Protocol AFP is enabled, any OS X user account including th...
