Dell Unity Operating Environment Open Redirection Phishing

The vulnerability of the operating environment for managing and maintaining Dell Unity Operating Environment OE storage devices is related to the use of open redirection. Exploiting this vulnerability allows a malicious actor to perform phishing attacks remotely...

Notes Station Code Execution

The vulnerability of the organization’s software for managing personal and corporate notes in Notes Station, when used with QNAP network storage systems, stems from the lack of authenticity verification for a critical function. Exploiting this vulnerability could allow an attacker operating...

STEALTHONE D220, D340, D440 Command Execution

The vulnerability of the web-based interface for managing microprogrammed software-based network storage devices STEALTHONE D220, D340, and D440 is related to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows ...

Zero-Click Flaw Exposes Potentially Millions of Popular Storage Devices to Attack

A vulnerability categorized as “critical” in a photo app installed by default on Synology network-attached storage devices could give attackers the ability to steal data and worse...

CBL Mariner 2.0 Security Update: kernel (CVE-2024-45026)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-45026 advisory. - In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to...

D-Link’s various products have command injection vulnerabilities

D-Link DNS-320 and others are products of China-based AUO D-Link.D-Link DNS-320 is a NAS Network Attached Storage device.D-Link DNS-120 is a network storage adapter.D-Link DNS-315L is a network attached storage. A command injection vulnerability exists in various D-Link products. The vulnerabilit...

CVE-2024-8129

CVE-2024-8129 affects multiple D-Link NAS/DNS devices (DNS-120, DNR-202L, DNS-315L, DNS-320/320L/320LW/320S, DNS-321, DNR-322L, DNS-323, DNS-325/326/327L, DNR-326, DNS-340L/343/345, DNS-726-4, DNS-1100-4, DNS-1200-05, DNS-1550-04) up to 20240814. The vulnerability is in the HTTP POST Request Hand...

CVE-2024-7922

CVE-2024-7922 affects D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 up to 2024-08-14. The vulnerability lies in the myMusic.cgi CGI ...

CVE-2024-7832

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240814 and classified as...

QTS QuTS Buffer Overflow

The vulnerability of the QTS and QuTS operating systems affects QNAP network storage devices, due to buffer overflows in the stack. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

QTS QuTS Buffer Overflow Code Execution

The vulnerability of the QTS and QuTS operating systems affects QNAP network storage devices, due to buffer overflows in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

QTS XSS

The vulnerability of the QTS operating system and QNAP network storage devices exists due to insufficient data cleaning. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a specially created link...

D-Link DNS-320L CGI Script Code Execution

The vulnerability of the CGI script nassharing.cgi of the D-Link DNS-320L, DNS-325, DNS-327L, and DNS-340L devices lies in the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary code ...

Unveiling AcidPour Evolution of Destructive Malware Targeting Ukraine

Summary: AcidPour, a variant of the destructive AcidRain wiper malware previously used during the Russia-Ukraine conflict, signals a heightened threat to Ukraines critical infrastructure. By targeting Linux UBI and DM logic, AcidPour poses a significant risk to large storage devices and RAID...

QTS Media Streaming Multimedia Console Command Execution

The vulnerability of the QTS operating system, the Media Streaming application for streaming multimedia files, and the Multimedia Console on QNAP devices is related to the possibility of executing commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

QTS Network Storage Unauthorized Access

The vulnerability of the QTS operating system’s network storage devices in QNAP is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to confidential data...

Privilege escalation

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master ADM allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...

CVE-2023-3699

CVE-2023-3699 affects ASUSTOR Data Master (ADM) on ASUSTOR NAS. The issue is an improper privilege management that allows an unprivileged local user to modify the storage devices configuration. Affected ADM versions: 4.0.6.RIS1 and below; 4.1.0 and below; 4.2.2.RI61 and below. Impact is the abili...

CVE-2023-3699 An Improper Privilege Management vulnerability was found on the ADM

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master ADM allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...

CVE-2023-3699 An Improper Privilege Management vulnerability was found on the ADM

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master ADM allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...