CVE-2017-15889

Command injection vulnerability in smart.cgi in Synology DiskStation Manager DSM before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field...

CVE-2017-15889

Command injection vulnerability in smart.cgi in Synology DiskStation Manager DSM before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field...

CVE-2017-15889

CVE-2017-15889 is a command injection vulnerability in Synology DiskStation Manager (DSM) smart.cgi that affects DSM versions prior to 5.2-5967-5. An authenticated remote attacker can inject commands via the disk field, potentially executing arbitrary commands with root privileges. Public details...

Synology StorageManager smart.cgi Remote Command Execution

Vulnerability Summary The following advisory describes a remote command execution vulnerability found in Synology StorageManager. Storage Manager is “a management application that helps you organize and monitor the storage capacity on your Synology NAS. Depending on the model and number of...

Synology StorageManager 5.2 - Root Remote Command Execution

Synology StorageManager 5.2 - Root Remote Command Execution ''' SSD Advisory – Synology StorageManager smart.cgi Remote Command Execution Full report: https://blogs.securiteam.com/index.php/archives/3540 Twitter: @SecuriTeamSSD Weibo: SecuriTeamSSD Vulnerability Summary The following advisory...

Synology DiskStation Manager smart.cgi Remote Command Execution

This module exploits a vulnerability found in Synology DiskStation Manager DSM versions use exploit/linux/http/synology/dsmsmartexecauth msf undefineddsmsmartexecauth show actions ...actions... msf undefineddsmsmartexecauth set ACTION msf undefineddsmsmartexecauth show options ...show and set...

CVE-2017-12076

CVE-2017-12076 affects Synology DiskStation Manager (DSM) prior to 6.1.1-15088, specifically SYNO.Core.PortForwarding.Rules. The vulnerability allows a remote authenticated attacker to cause uncontrolled resource consumption by exhausting memory, resulting in a denial of service. Affects DSM depl...

Information disclosure

An information exposure vulnerability in forgetpasswd.cgi in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors...

CVE-2017-9554

Synology DiskStation Manager (DSM) is affected by CVE-2017-9554 via the forget_passwd.cgi endpoint. The vulnerability is an information exposure that allows remote attackers to enumerate valid usernames. Affected firmware versions are DSM prior to 6.1.3-15152. The root cause is information leakag...

CVE-2017-9554

An information exposure vulnerability in forgetpasswd.cgi in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors. Recent assessments: h00die at May 21, 2020 2:01pm UTC reported: Vulnerability is trivial to exploit. Send ...

CVE-2016-10330

Directory traversal vulnerability in synophotodsmuser, a SUID program, as used in Synology Photo Station before 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors...

CVE-2016-2406

The permission control module in Huawei Document Security Management aka DSM before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button...

CVE-2016-2406

The permission control module in Huawei Document Security Management aka DSM before V100R002C05SPC670 allows remote authenticated users to obtain sensitive information from encrypted documents by leveraging incorrect control of permissions on the PrintScreen button...

CVE-2016-2406

The CVE-2016-2406 issue affects Huawei Document Security Management (DSM) prior to V100R002C05SPC670. The vulnerability is in the permission control module, where incorrect control of permissions on the PrintScreen button allows remote authenticated users to obtain sensitive information from encr...

Synology DiskStation Manager (DSM) Web Administration Interface Default Credentials

The web administration interface for the Synology DiskStation Manager DSM application running on the remote host uses a default blank password for the administrator account. A remote attacker can exploit this to gain administrative access to the web interface. C Tenable Network Security, Inc...

Synology NAS DSM 5.2 远程代码执行漏洞

Getting started I recently bought a Synology DS416 NAS and noticed during the set-up process you are first required to download the device firmware, which is then flashed to the device via the setup web interface. Interested in my new devices security, I decided to take a look at the firmware whi...

CVE-2015-8303

Huawei Document Security Management DSM with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by pasting the contents to another file...

Design/Logic Flaw

Huawei Document Security Management DSM with software before V100R002C05SPC661 does not clear the clipboard when closing a secure file, which allows local users to obtain sensitive information by pasting the contents to another file...

CVE-2015-8303

Huawei Document Security Management (DSM) prior to V100R002C05SPC661 fails to clear the clipboard after closing a secure file, enabling local users to paste sensitive data into another file. Multiple sources (NVD/CNVD/CVE records, Huawei PSIRT advisory HWPSIRT-2015-09009) describe this local info...

Security Advisory - Information Leak Vulnerability in Huawei DSM Product

There is a information leak vulnerability in DSM Product. The DSM does not clear the clipboard after data in a secure file opened using the DSM is copied and the secure file is closed. Data in the clipboard can be copied in common documents that do not use the DSM, leading to information leaks...