268 matches found
Synology SRM DHCP monitor hostname parsing Denial of Service Vulnerability
Summary An exploitable denial of service vulnerability exists in the DHCP monitor’s hostname parsing functionality of Synology SRM 1.2.3 MR2200ac 8017 and 1.2.3 RT2600ac 8017. A specially crafted network request can cause an out-of-bounds read resulting in a denial of service. An attacker can sen...
CVE-2019-11823
CRLF injection vulnerability in Network Center in Synology Router Manager SRM before 1.2.3-8017-2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted network traffic...
Crlf injection
CRLF injection vulnerability in Network Center in Synology Router Manager SRM before 1.2.3-8017-2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted network traffic...
CVE-2019-11823
CVE-2019-11823 is a CRLF-injection DoS vulnerability in the Synology Router Manager (SRM) Network Center, exploitable on SRM versions before 1.2.3-8017-2. An attacker can send crafted network traffic to trigger an out-of-bounds read, crashing the application. Multiple sources (NVD, CVE lists, Syn...
CVE-2019-0361
Summary : CVE-2019-0361 affects SAP Supplier Relationship Management (SRM) – specifically the Master Data Management Catalog (SRM_MDM_CAT) . The vulnerability arises because the component does not sufficiently encode user-controlled inputs , resulting in a Cross-Site Scripting (XSS) issue. Affect...
Information Leakage Vulnerability in Zhenyun Technology's HAND SRM System
Zhen Yun Technology HAND SRM system is a one-stop digital management platform based on SaaS service/technology architecture. An information leakage vulnerability exists in Zhen Yun Technology HAND SRM System, which can be exploited by attackers to obtain sensitive information...
CVE-2018-13292
Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration...
CVE-2018-13289
CVE-2018-13289 affects Synology Router Manager (SRM) and is tied to SYNO.FolderSharing.List. The SRM versions before 1.1.7-6941-2 expose sensitive information via folder_path and real_path parameters. The vulnerability description notes information disclosure (confidentiality impact), with CVSS d...
CVE-2018-13290
Synology SRM 1.1.x is affected by CVE-2018-13290 (Information exposure via SYNO.Core.ACL). Affected: Synology Router Manager (SRM) before 1.1.7-6941-2. Issue: remote authenticated users can determine file existence or access sensitive file information via the file_path parameter. CVSS metrics ind...
CVE-2018-13292
CVE-2018-13292 affects Synology Router Manager (SRM) before 1.1.7-6941-2. The NVD entry describes an information‑exposure vulnerability in the /usr/syno/etc/mount.conf file that allows remote authenticated users to obtain sensitive information via the world‑readable configuration. Impact is parti...
CVE-2018-13285
CVE-2018-13285 : Synology Router Manager (SRM) contains a command-injection in the FTP daemon (ftpd). Affected: SRM versions before 1.1.7-6941-1. Vulnerability allows remote authenticated users to execute arbitrary OS commands with MKD/RMD. Root cause is improper handling of FTP commands in ftpd....
CVE-2018-13287
CVE-2018-13287 refers to an issue in Synology Router Manager (SRM) before 1.1.7-6941-1 where synouser.conf has incorrect default permissions, allowing remote authenticated users to obtain sensitive information via the world-readable configuration. Affected: SRM running before 1.1.7-6941-1; vulner...
Post-Exploitation Framework for Linux Written in Bash: Orc
Orc is a simple post-exploitation written in bash. I wrote this because I myself needed a more featureful post-exploitation toolkit for Linux. It’s part of a larger bundle of scripts and tools, but I’ll add those as I write and re-write them. It takes the form of an ENV script, so load orc into a...
CVE-2018-8918
Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...
CVE-2018-8918
Synology Router Manager (SRM) is affected by a cross-site scripting (XSS) vulnerability in the info.cgi endpoint. The issue allows remote attackers to inject arbitrary web script or HTML via the host parameter in SRM versions prior to 1.1.7-6941. The root cause is an XSS flaw in how the host para...
Cross site scripting
Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...
SolarWinds Storage Resource Monitor (SRM) Detection (Windows SMB Login)
SMB login-based detection of SolarWinds Storage Resource Monitor SRM. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-2449
SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in SAP NetWeaver 7.3 - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying...
CVE-2018-2449
SAP SRM MDM Catalog versions 3.73, 7.31, 7.32 in SAP NetWeaver 7.3 - import functionality does not perform authentication checks for valid repository user. This is an unauthenticated functionality that you can use on windows machines to do SMB relaying...