D-Link DNS-320 /cgi-bin/discovery.cgi File Information Disclosure Vulnerability

The D-Link DNS-320 is a two-drive networked storage device NAS from AUO, designed for home and small office scenarios, supporting up to 4TB of storage capacity. The D-Link DNS-320 suffers from an information disclosure vulnerability, which originates from the file /cgi-bin/discovery.cgi being...

QNAP QTS and QuTS hero cross-site scripting vulnerability

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS和QuTS hero 安全漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

Iomega StorCenter Pro NAS Web Authentication Bypass

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Iomega StorCenter Pro NAS Web Authentication Bypass', 'Description' = %q The Iomega StorCenter Pro Network Attached Storage device web interface...

D-Link多款产品 命令注入漏洞

D-Link DNR-322L and others are products of China AUO D-Link.D-Link DNR-322L is a network video recorder.D-Link DNS-325 is a NAS Network Attached Storage device.D-Link DNS-120 is a network storage adapter. A command injection vulnerability exists in various D-Link products. The vulnerability stems...

D-Link多款产品 命令注入漏洞

D-Link DNS-320 and others are products of China-based AUO D-Link.D-Link DNS-320 is a NAS Network Attached Storage device.D-Link DNS-120 is a Network Storage Adapter.D-Link DNS-315L is a Network Attached Storage.D-Link DNS-315L is a Network Attached Storage.D-Link DNS-320 is a Network Attached...

D-Link多款产品 命令注入漏洞

D-Link DNS-325 and others are a NAS Network Attached Storage device from China's D-Link Corporation. A command injection vulnerability exists in various D-Link products, which originates from a command injection vulnerability in the path parameter of the cgiaddzip function in the...

D-Link多款产品 命令注入漏洞

D-Link DNS-325 and others are a NAS Network Attached Storage device from China's D-Link Corporation. A command injection vulnerability exists in various D-Link products, which originates from a command injection vulnerability in the path parameter of the cgiunzip function in the...

D-Link多款产品 命令注入漏洞

D-Link DNS-325 and others are a NAS Network Attached Storage device from China's AUO D-Link. A command injection vulnerability exists in various D-Link products, which originates from a command injection vulnerability in the fsourcedev parameter of the cgiFMTStd2R51stDiskMGR function in the...

DEBIAN-CVE-2022-48942

In the Linux kernel, the following vulnerability has been resolved: hwmon: Handle failure to register sensor with thermal zone correctly If an attempt is made to a sensor with a thermal zone and it fails, the call to devmthermalzoneofsensorregister may return -ENODEV. This may result in crashes...

HwameiStor 安全漏洞

HwameiStor is a Kubernetes-native Container Attached Storage CAS solution open-sourced by HwameiStor. A security vulnerability exists in HwameiStor v0.14.3 and earlier versions, which stems from the presence of an insecure privilege that allows an attacker to access sensitive data and elevate...

Malicious code in sap-attached (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d17d29e31d8b57d3a46794cd2d666430365a7784ec6afd89b8e624c87a4e896 The OpenSSF Package Analysis project identified 'sap-attached' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7575 Malicious code in sap-attached (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 3d17d29e31d8b57d3a46794cd2d666430365a7784ec6afd89b8e624c87a4e896 The OpenSSF Package Analysis project identified 'sap-attached' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...

UBUNTU-CVE-2021-4439

In the Linux kernel, the following vulnerability has been resolved: isdn: cpai: check ctr-cnr to avoid array index out of bound The cmtpaddconnection would add a cmtp session to a controller and run a kernel thread to process cmtp. modulegetTHISMODULE; session-task = kthreadruncmtpsession, sessio...

DEBIAN-CVE-2024-38584

In the Linux kernel, the following vulnerability has been resolved: net: ti: icssgprueth: Fix NULL pointer dereference in pruethprobe In the pruethprobe function, if one of the calls to emacphyconnect fails due to ofphyconnect returning NULL, then the subsequent call to phyattachedinfo will...

Vulnerabilities fixed in Adobe Experience Manager

Adobe has fixed a large number of vulnerabilities in Experience Manager. A malicious party can exploit the vulnerabilities to bypass security measures and launch a Cross-Site Scripting attack in various ways. Such an attack often results in execution of arbitrary code in the victim's browser, or...

CVE-2021-47333

In the Linux kernel, the following vulnerability has been resolved: misc: alcorpci: fix null-ptr-deref when there is no PCI bridge There is an issue with the ASPMoptional capability checking function. A device might be attached to root complex directly, in this case, bus-selfbridge will be NULL,...

Openmediavault Remote Code Execution / Local Privilege Escalation Exploit

Openmediavault versions prior to 7.0.32 have a vulnerability that occurs when users in the web-admin group enter commands on the crontab by selecting the root shell. As a result of exploiting the vulnerability, authenticated web-admin users can run commands with root privileges and receive revers...

D-Link NAS nas_sharing.cgi command injection

Added: 04/24/2024 CVE: CVE-2024-3273 Background D-Link Network Attached Storage NAS devices allow different clients to connect to a centralized disk on a Local Area Network LAN. Problem A backdoor and a command injection vulnerability in the nassharing.cgi script allow a remote attacker to execut...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A plaintext transfer of sensitive information vulnerability exists in Dell PowerScale OneFS, which can be exploited by attackers to cause an escalation of...