509 matches found
CVE-2017-7633
QNAP Qfinder Pro 6.1.0.0317 and earlier may expose sensitive information contained in NAS devices. If exploited, this may allow attackers to further compromise the device...
Can't import Gold VM into App Layering, it says "The virtual machine template cannot have any attached disks."
You are trying to import a new Gold VM to be an OS layer. The first thing you need to do is create a Connector. In the Connector, you see the field for Template, and you try to select your Gold VM there. When you test it, it fails saying one of these: "The virtual machine template cannot have any...
Seagate Media Server Arbitrary File / Folder Deletion Vulnerabilities
Seagate Media Server on a Seagate Personal Cloud model SRN21C running firmware version 4.3.16.0 suffers from an unauthenticated arbitrary file and folder deletion vulnerability. ------------------------------------------------------------------------ Seagate Media Server allows deleting of...
Unlimited File Upload Vulnerability in Western Digital My Cloud NAS Devices
The Western Digital MyCloud NAS is a network attached storage device. An unrestricted file upload vulnerability exists in the Western Digital My Cloud NAS device that could allow a remote attacker to upload an arbitrary file to a server running on a vulnerable Internet-connected storage device...
Western Digital My Cloud NAS Device Command Injection Vulnerability
The Western Digital MyCloud NAS is a network attached storage device. A command injection vulnerability exists in the Western Digital My Cloud NAS device, which can be exploited by an attacker to gain full control root access of an affected device...
WDMyCloud 2.30.165 CSRF / File Upload / Code Execution / Backdoor / DoS
/ / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development WDMyCloud = 2.30.165 Multiple Vulnerabilities Released Date: 2018-01-04 Last Modified: 2017-06-11 Company Info: Western Digital Version Info: Vulnerable MyCloud =...
WDMyCloud 2.30.165 - Multiple Vulnerabilities
WDMyCloud 2.30.165 - Multiple Vulnerabilities WDMyCloud Multiple Vulnerabilities Vendor: Western Digital Product: WDMyCloud Version: = 2.30.165 Website: https://www.wdc.com/products/network-attached-storage.html / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,///...
WDMyCloud < 2.30.165 - Multiple Vulnerabilities
WDMyCloud Multiple Vulnerabilities Vendor: Western Digital Product: WDMyCloud Version: = 2.30.165 Website: https://www.wdc.com/products/network-attached-storage.html / / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development...
NetTransport Download Manager Buffer Overflow Vulnerability
NetTransport Download Manager is a network download manager that supports various network protocols such as MMS, RTSP, PNM, HTTP and HTTPS. A buffer overflow vulnerability exists in the NetTransport.exe file in NetTransport Download Manager 2.96L and earlier versions. A remote attacker can exploi...
CVE-2017-17027
A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...
CVE-2017-17029
A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices...
QNAP QTS Buffer Overflow Vulnerability (CNVD-2017-37608)
QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A buffer overflow vulnerability exists in QNAP QTS. A remote attacker could exploit this vulnerability to execute arbitrary code on th...
QNAP QTS Buffer Overflow Vulnerability (CNVD-2017-37606)
QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A buffer overflow vulnerability exists in QNAP QTS. A remote attacker could exploit this vulnerability to execute arbitrary code on th...
RubyGems: Installer can modify other gems if gem name is specially crafted
Installer can modify other gems if gem name is specially crafted The installlocation function allows writing to certain files outside the installation directory. The installlocation function in lib/rubygems/package.rb attempts to ensure that files are not installed outside destinationdir. However...
CVE-2017-10700
In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application...
Threat Outbreak Alert RuleID30637: Email Messages Distributing Malicious Software on September 18, 2017
Medium Alert ID: 55318 First Published: 2017 September 18 14:18 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID30637 may contain the following files: Name ...
banners.sexe.nostringsattached.com XSS vulnerability
Open Bug Bounty ID: OBB-279638 Description| Value ---|--- Affected Website:| banners.sexe.nostringsattached.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
Mozilla: Use-after-free while deleting attached editor DOM node (MFSA 2017-19)
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while still bound to the document. This results in a potentially exploitable crash. This vulnerability affects Thunderbird 52.3, Firefox ESR 52.3, and Firefox 55...
Synology DiskStation Manager (DSM) Information Disclosure Vulnerability
Synology DiskStation Manager is an operating system for use on networked storage servers NAS. A security vulnerability in Synology DiskStation Manager forgetpasswd.cgi allows remote attackers to submit a special request to enumerate valid usernames...
