399 matches found
CVE-2017-9554-Exploit-Tool
CVE-2017-9554-Exploit-Tool CVE-2017-9554 Ų£ŲÆŲ§Ų© Ų§Ų³ŲŖŲŗŁŲ§Ł Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' Ų£ŲÆŲ§Ų© Ų§Ų³ŲŖŲŗŁŲ§Ł ŲŖŲ¹ŲÆŲ§ŲÆ Ų§ŁŁ Ų³ŲŖŲ®ŲÆŁ ŁŁ Ł Ų¤ŁŁ Ų§ŁŲ§Ų³ŲŖŲŗŁŲ§Ł : Steve Kaun Ł Ų¤ŁŁ Ų£ŲÆŲ§Ų© Ų§ŁŲ§Ų³ŲŖŲŗŁŲ§Ł : Ez0-yf Ų§ŁŲµŁŲŲ© Ų§ŁŲ±Ų¦ŁŲ³ŁŲ© ŁŁŲØŲ§Ų¦Ų¹ : https://www.synology.com Ų§ŁŲ„ŲµŲÆŲ§Ų± : ŁŲØŁ 6.1.3-15152 CVE :...
CVE-2013-6987
CVE-2013-6987 Synology DiskStation Managerļ¼DSMļ¼4.3-3810 Update 3 ććåć®ćć¼ćøć§ć³ć® FileBrowser ć³ć³ćć¼ćć³ćć«ćÆč¤ę°ć®ćć£ć¬ćÆććŖćć©ćć¼ćµć«čå¼±ę§ćååØćććŖć¢ć¼ćć®ę»ęč ć ..ļ¼ććććććļ¼ćä»ćć¦ä»»ęć®ćć”ć¤ć«ćčŖćæåććęøćč¾¼ćæćåé¤ć§ććåÆč½ę§ćććć¾ćć ä½æēØę³: root@kitploit: python example: list filesystem python filelist.py ABCDFEGH1234 /home/../../../../...
CVE-2026-68346
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41getacpimutestate evaluates a DSM method to get the ACPI mute state and reads the first byte from the returned object. However, the returned ACPI object is owned by the...
CVE-2026-68346 ALSA: hda: cs35l41: validate and free ACPI mute object
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41getacpimutestate evaluates a DSM method to get the ACPI mute state and reads the first byte from the returned object. However, the returned ACPI object is owned by the...
EUVD-2026-55447
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41getacpimutestate evaluates a DSM method to get the ACPI mute state and reads the first byte from the returned object. However, the returned ACPI object is owned by the...
CVE-2026-68346
CVE-2026-68346 concerns the Linux kernel ALSA hda cs35l41 ACPI mute handling. The issue arises when cs35l41_get_acpi_mute_state() calls a _DSM method to obtain the ACPI mute state and reads the first byte of the returned object, but the returned ACPI object is not freed, causing a leak per query....
Astra Linux ā Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd: Fixed a memory leak in wbrfrecord. The tmp buffer is allocated using kcalloc, but it is not freed if acpievaluatedsm fails. This causes a memory leak in the error path. This issue has been fixed by explicitly...
CVE-2025-13392
Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager DSM before 7.2.2-72806-5 and 7.3.1-86003-1 7.2.1-69057 is not affected allows remote attackers to bypass authentication with prior knowledge of the distinguished name DN...
CVE-2025-13392
Summary : CVE-2025-13392 affects Synology DiskStation Manager (DSM) via an improper check in the SSO authentication flow, enabling remote authentication bypass with knowledge of a DN. Affected versions : DSM before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected). Impact : local/remo...
PT-2026-43586
An Exposed Dangerous Method or Function vulnerability in Synology C2 Identity Edge Server package in DSM before 1.76.0-0307 allows remote attackers to obtain user credentials from the edge server...
Astra Linux ā Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: A memory leak has been fixed in the ipcpciereadbioscfg function. The ipcpciereadbioscfg function uses acpievaluatedsm to obtain the wwan power state configuration from the BIOS. However, it does not free the...
Astra Linux ā Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: Fixed a NULL pointer dereference in cs35l41getacpimutestate. The return value of the function acpievaluatedsm is dereferenced without checking for NULL. However, this check is usually performed for this...
PT-2026-33604
CVE-2026-40530, CVE-2026-4036, and others: Vulnerabilities in Synology DSM, up to 8.0 rating š„ Several vulnerabilities in Synology DiskStation Manager DSM allow remote authenticated attacker to read or write files, conduct denial-of-service attacks, and obtain information, including arbitrary...
SUSE CVE-2026-31423
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: fix divide-by-zero in rtscmin m2sm converts a u32 slope to a u64 scaled value. For large inputs e.g. m1=4000000000, the result can reach 2^32. rtscmin stores the difference of two such u64 values in a u32...
EUVD-2026-21947
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: fix divide-by-zero in rtscmin m2sm converts a u32 slope to a u64 scaled value. For large inputs e.g. m1=4000000000, the result can reach 2^32. rtscmin stores the difference of two such u64 values in a u32...
CVE-2026-31423
In the Linux kernel, the following vulnerability has been resolved: net/sched: schhfsc: fix divide-by-zero in rtscmin m2sm converts a u32 slope to a u64 scaled value. For large inputs e.g. m1=4000000000, the result can reach 2^32. rtscmin stores the difference of two such u64 values in a u32...
PT-2026-32349
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A divide-by-zero error exists in the rtsc min function within the concave-curve intersection path. The m2sm function converts a u32 slope to a u64 scaled value; for large inputs, this...
CVE-2026-3483
An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges...
