ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection

ASUSTOR ADM version 3.1.0.RFQ3 is vulnerable to SQL injection via the albumid parameter in the /photo-gallery/api/album/treelists/ endpoint. An attacker can exploit this vulnerability to execute arbitrary SQL commands on the database, potentially leading to information disclosure or further...

iClock Automatic Data Master Server Admin Panel - Detect

An iClock Automatic Data Master Server Admin login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """An iClock Automatic Data Master Server Admin login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...

Exploit for OS Command Injection in Asustor Data_Master

No d...

Exploit for Stack-based Buffer Overflow in Asustor Data_Master

CVE-2026-6643 — ASUSTOR ADM 5.1.2 RCE Format String CWE-134...

EUVD-2018-7566

Malware in sbrugna...

EUVD-2018-7564

Malware in sbrugna...

EUVD-2018-7568

Malware in sbrugna...

EUVD-2018-7567

Malware in sbrugna...

EUVD-2018-7569

Malware in sbrugna...

EUVD-2018-7565

Malware in sbrugna...

EUVD-2023-44335

Malicious code in bioql PyPI...

EUVD-2023-54330

Malicious code in bioql PyPI...

EUVD-2023-34356

Malicious code in bioql PyPI...

EUVD-2023-35134

Malicious code in bioql PyPI...

ASUSTOR Data Master Arbitrary Command Execution

The vulnerability of the ASUSTOR Data Master operating system is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

ASUSTOR Data Master Privilege Bypass

The vulnerability of the ASUSTOR Data Master operating system is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to modify the configuration of storage devices...

ASUSTOR Data Master File Renaming

The vulnerability of the file renaming function of the ASUSTOR Data Master operating system involves the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a hacker to move arbitrary files...

ASUSTOR Data Master Authorization Issues Vulnerability

ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. An authorization issue vulnerability exists in ASUSTOR Data Master, which arises from improper privilege management and can be exploited by an unprivileged local attacker to modify the storage device...

CVE-2023-4475

An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master ADM allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...

CVE-2023-4475

An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master ADM allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below...