EUVD-2015-5979

Malware in sbrugna...

EUVD-2015-5965

Malware in sbrugna...

VulnCheck KEV: CVE-2015-7261

The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21...

QNAP Signage Station Server Detection

Binary data signagestationdetect.nbin...

QNAP Signage Station Arbitrary File Upload Vulnerability

The version of QNAP Signage Station running on the remote host is affected by an arbitrary file upload vulnerability in the contentTemplateDownload.php script. A remote attacker can exploit this, via an HTTP request, to upload arbitrary files. C Tenable Network Security, Inc. include"compat.inc";...

Signage Station Presentation Preparation Program iArtist Lite Presentation Preparation XSS

The vulnerability of the Signage Station presentation preparation service and the iArtist Lite presentation preparation utility exists due to the rigid encoding of registration data. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to protected informatio...

CVE-2015-6036

QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request...

Unrestricted file upload

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL...

Authentication flaw

QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request...

CVE-2015-6022

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL...

CVE-2015-6036

QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request...

CVE-2015-6022

QCV: CVE-2015-6022 describes an unrestricted file upload in QNAP Signage Station prior to version 2.0.1. An authenticated user can upload a dangerous file (e.g., a PHP script) and access it via a predictable URL to execute code with the server’s privileges. Impact is remote code execution with hi...

CVE-2015-6036

CVE-2015-6036 affects QNAP Signage Station prior to version 2.0.1. An unauthenticated attacker can bypass authentication by sending a spoofed HTTP request, enabling remote upload of files to the server. The vulnerability is documented across multiple sources (NVD description aligns with the bypas...

CVE-2015-6022

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL...

CVE-2015-6022: Undefined Security Weakness

Unrestricted file upload vulnerability in QNAP Signage Station before 2.0.1 allows remote authenticated users to execute arbitrary code by uploading an executable file, and then accessing this file via an unspecified URL...

CVE-2015-7262: Undefined Security Weakness

QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot...

PT-2016-3703

Name of the Vulnerable Software and Affected Versions QNAP Signage Station versions prior to 2.0.1 Description The issue allows remote attackers to bypass authentication and upload files via a spoofed HTTP request. Recommendations For versions prior to 2.0.1, update to version 2.0.1 or later to...

QNAP Systems Signage Station Authentication Bypass Vulnerability

QNAP Systems Signage Station is a suite of ad creation applications for QNAP NAS. An authentication bypass vulnerability exists in QNAP Systems Signage Station, which allows remote attackers to perform unauthorized actions by sending spoofed HTTP requests...

CVE-2015-6036: Undefined Security Weakness

QNAP Signage Station before 2.0.1 allows remote attackers to bypass authentication, and consequently upload files, via a spoofed HTTP request...

PT-2016-1318

Name of the Vulnerable Software and Affected Versions QNAP Signage Station versions prior to 2.0.1 QNAP iArtist Lite versions prior to 1.4.54 Description The issue exists due to hardcoded registration data in the FTP service of the affected software. This allows a remote attacker to gain access t...