Lucene search
K

6 matches found

0day.today
0day.today
added 2018/01/08 12:0 a.m.146 views

Synology DiskStation Manager (DSM) < 6.1.3-15152 - forget_passwd.cgi User Enumeration

Exploit for cgi platform in category web applications Exploit Title: Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' User Enumeration Date: 01/05/2018 Exploit Author: Steve Kaun Vendor Homepage: https://www.synology.com Version: Before 6.1.3-15152 CVE : CVE-2017-9554 Previously...

5CVSS5.7AI score0.57867EPSS
Exploits6
exploitpack
exploitpack
added 2018/01/08 12:0 a.m.30 views

Synology DiskStation Manager (DSM) 6.1.3-15152 - forget_passwd.cgi User Enumeration

Synology DiskStation Manager DSM 6.1.3-15152 - forgetpasswd.cgi User Enumeration Exploit Title: Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' User Enumeration Date: 01/05/2018 Exploit Author: Steve Kaun Vendor Homepage: https://www.synology.com Version: Before 6.1.3-15152 CVE ...

5CVSS5.7AI score0.57867EPSS
Exploits6
Packet Storm
Packet Storm
added 2018/01/08 12:0 a.m.71 views

Synology DiskStation Manager (DSM) User Enumeration

Exploit Title: Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' User Enumeration Date: 01/05/2018 Exploit Author: Steve Kaun Vendor Homepage: https://www.synology.com Version: Before 6.1.3-15152 CVE : CVE-2017-9554 Previously this was identified by the developer and the disclosur...

5CVSS5.8AI score0.57867EPSS
Exploits6
Exploit DB
Exploit DB
added 2018/01/08 12:0 a.m.128 views

Synology DiskStation Manager (DSM) &lt; 6.1.3-15152 - &#039;forget_passwd.cgi&#039; User Enumeration

Exploit Title: Synology DiskStation Manager DSM 6.1.3-15152 - 'forgetpasswd.cgi' User Enumeration Date: 01/05/2018 Exploit Author: Steve Kaun Vendor Homepage: https://www.synology.com Version: Before 6.1.3-15152 CVE : CVE-2017-9554 Previously this was identified by the developer and the disclosur...

5.3CVSS5.7AI score0.57867EPSS
Exploits6
Prion
Prion
added 2017/07/24 8:29 p.m.14 views

Information disclosure

An information exposure vulnerability in forgetpasswd.cgi in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors...

5CVSS6.8AI score0.57867EPSS
Exploits6References2Affected Software1
CVE
CVE
added 2017/07/24 8:0 p.m.74 views

CVE-2017-9554

Synology DiskStation Manager (DSM) is affected by CVE-2017-9554 via the forget_passwd.cgi endpoint. The vulnerability is an information exposure that allows remote attackers to enumerate valid usernames. Affected firmware versions are DSM prior to 6.1.3-15152. The root cause is information leakag...

5.3CVSS5.3AI score0.57867EPSS
Exploits6References2Affected Software1
Rows per page
Query Builder