Ubuntu 16.04 LTS : Linux kernel (Azure) vulnerabilities (USN-3678-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3678-2 advisory. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker...

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-3678-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3678-1 advisory. Wen Xu discovered that the ext4 filesystem implementation in the Linux kernel did not properly handle corrupted meta data in some situations. An attacker...

FBI Router Reboot Warning: How Do I Stay Safe from the New VPNFilter Malware?

You might have seen reports that the FBI is warning home users of a new foreign cyber-attack campaign targeted at your routers and network-attached storage NAS devices. Here’s a breakdown of exactly what has happened, and what you need to do to keep your home IT systems safe and secure. What is...

Authentication bypass vulnerability in Western Digital My Cloud

Abstract It was discovered that Western Digital My Cloud is affected by an authentication bypass vulnerability. By exploiting this vulnerability, an unauthenticated attacker can bypass the login functionality and gain full control of the device. Tested versions This vulnerability was successfully...

Seagate Personal Cloud allows moving of arbitrary files

Abstract Seagate Personal Cloud is a consumer-grade Network-Attached Storage device NAS. It was found that the web application used to manage the NAS contains a vulnerability that allows an unauthenticated attacker to move arbitrary files. The move operation is done with root privileges, which...

CVE-2017-18232

The Serial Attached SCSI SAS implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service deadlock by triggering certain error-handling code...

CVE-2017-18232

The Serial Attached SCSI SAS implementation in the Linux kernel through 4.15.9 mishandles a mutex within libsas, which allows local users to cause a denial of service deadlock by triggering certain error-handling code...

Linux kernel denial of service vulnerability (CNVD-2018-06401)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. A security vulnerability exists in the Serial Attached SCSI SAS implementation in Linux kernel 4.15.9 and earlier versions, which stems from a program's failure to...

Media Streaming add-on cross-site scripting vulnerability

QNAP NAS application Media Streaming add-on is a video streaming loading application for QNAP NAS devices from QNAP Systems. A cross-site scripting vulnerability exists in QNAP NAS application Media Streaming add-on version 21.1.0.2 and earlier and version 430.1.2.0 and earlier. A remote attacker...

QNAP NAS application Media Streaming add-on arbitrary OS command execution vulnerability

QNAP NAS application Media Streaming add-on is a video streaming loading application for QNAP NAS devices from QNAP Systems. A security vulnerability exists in the QNAP NAS application Media Streaming add-on version 421.1.0.2 and earlier and version 430.1.2.0 and earlier. A remote attacker can...

NetApp SnapCenter Information Disclosure Vulnerability

NetApp SnapCenter is a suite of applications from NetApp, Inc. that provide the ability to back up, validate, clone, and restore NetApp storage systems.NetApp SnapCenter Server is a server version... A security vulnerability exists in NetApp SnapCenter versions 2.0 through 3.0.1. A remote attacke...

The vulnerability in the NetTransport.exe executable of the NetTransport download manager allows a hacker to execute arbitrary code.

The vulnerability in the NetTransport.exe executable of the NetTransport download manager is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on NAS devices using specially crafted HTTP responses...

QNAP Qfinder Pro Information Disclosure Vulnerability

QNAP Qfinder Pro is a suite of software from China Weilian QNAP Systems for quickly searching for QNAP NAS devices on your LAN. A security vulnerability exists in QNAP Qfinder Pro 6.1.0.0317 and earlier versions. An attacker could exploit the vulnerability to obtain sensitive information on a NAS...

CVE-2017-7633

QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device...

Can't import Gold VM into App Layering, it says "The virtual machine template cannot have any attached disks."

You are trying to import a new Gold VM to be an OS layer. The first thing you need to do is create a Connector. In the Connector, you see the field for Template, and you try to select your Gold VM there. When you test it, it fails saying one of these: "The virtual machine template cannot have any...

Seagate Media Server Arbitrary File / Folder Deletion Vulnerabilities

Seagate Media Server on a Seagate Personal Cloud model SRN21C running firmware version 4.3.16.0 suffers from an unauthenticated arbitrary file and folder deletion vulnerability. ------------------------------------------------------------------------ Seagate Media Server allows deleting of...

Unlimited File Upload Vulnerability in Western Digital My Cloud NAS Devices

The Western Digital MyCloud NAS is a network attached storage device. An unrestricted file upload vulnerability exists in the Western Digital My Cloud NAS device that could allow a remote attacker to upload an arbitrary file to a server running on a vulnerable Internet-connected storage device...

Western Digital My Cloud NAS Device Command Injection Vulnerability

The Western Digital MyCloud NAS is a network attached storage device. A command injection vulnerability exists in the Western Digital My Cloud NAS device, which can be exploited by an attacker to gain full control root access of an affected device...

WDMyCloud 2.30.165 CSRF / File Upload / Code Execution / Backdoor / DoS

/ / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development WDMyCloud = 2.30.165 Multiple Vulnerabilities Released Date: 2018-01-04 Last Modified: 2017-06-11 Company Info: Western Digital Version Info: Vulnerable MyCloud =...

WDMyCloud 2.30.165 - Multiple Vulnerabilities

WDMyCloud 2.30.165 - Multiple Vulnerabilities WDMyCloud Multiple Vulnerabilities Vendor: Western Digital Product: WDMyCloud Version: = 2.30.165 Website: https://www.wdc.com/products/network-attached-storage.html / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,///...