QNAP Q'Center - 'change_passwd' Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "QNAP Q'Center changepasswd Command Execution", 'Description' = %q This module exploits a command injection vulnerability in the changepasswd API...

CVE-2018-0706

CVE-2018-0706: An information-disclosure vulnerability in QNAP Q’Center Virtual Appliance affects version 1.7.1063 and earlier. Authenticated users could access sensitive information via the web console (Information Exposure, CWE-200). Multiple linked advisories (QNAP, Core Security) describe the...

QNAP Qcenter Virtual Appliance Information Disclosure (CVE-2018-0706)

An Information disclosure vulnerability exists in QNAP Qcenter Virtual Appliance web console. Successful exploitation of this vulnerability would allow an authenticated user to obtain sensitive information...

QNAP Qcenter Virtual Appliance 1.6.x Information Disclosure / Command Injection Vulnerabilities

QNAP Qcenter Virtual Appliance versions 1.6.1056 20170825 and 1.6.1075 20171123 suffer from information disclosure and command injection vulnerabilities. QNAP Qcenter Virtual Appliance Multiple Vulnerabilities 1. Advisory Information Title: QNAP Qcenter Virtual Appliance Multiple Vulnerabilities...

QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ QNAP Qcenter Virtual Appliance Multiple Vulnerabilities 1. Advisory Information Title: QNAP Qcenter Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0006 Advisory URL:...

CVE-2018-0706

creationtimestamp| type| source ---|---|--- 2018-07-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/45015 2018-07-14 15:26:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnapqcenterchangepasswdexec.rb 2018-07-17...

QNAP Qcenter Virtual Appliance 1.6.x Information Disclosure / Command Injection

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ QNAP Qcenter Virtual Appliance Multiple Vulnerabilities 1. Advisory Information Title: QNAP Qcenter Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0006 Advisory URL:...

QNAP Q'center Virtual Appliance Multiple Vulnerabilities

Advisory ID Internal CORE-2018-0006 1. Advisory Information Title: QNAP Q'center Virtual Appliance Multiple Vulnerabilities Advisory ID: CORE-2018-0006 Advisory URL:https://www.coresecurity.com/core-labs/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities Date published: 2018-07-11...