PT-2024-2013 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: myQNAPcloud versions prior to 1.0.52 QTS versions prior to 4.5.4.2627 build 20231225 Description: A SQL injection vulnerability has been reported, which could allow authenticated administrators to inject malicious code via a network. The...

QNAP Systems SQL Injection Vulnerability in Multiple Products

QNAP Systems myQNAPcloud Connect and QNAP Systems QTS are both products of China's Weilian Technology QNAP Systems.QNAP Systems myQNAPcloud Connect is an application for connecting, sharing and managing QNAP NAS files. QNAP Systems QTS is an operating system for entry to mid-level QNAP NAS use. A...

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

CVE-2021-28815

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

Code injection

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

CVE-2021-28815 Insecure Storage of Sensitive Information in myQNAPcloud Link

Insecure storage of sensitive information has been reported to affect QNAP NAS running myQNAPcloud Link. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism. This issue affects: QNAP Systems Inc. myQNAPcloud Link...

CVE-2021-28815

CVE-2021-28815: Affected product is QNAP Systems Inc. myQNAPcloud Link running on QTS 4.5.3 (and QuTS hero h4.5.2; QuTScloud c4.5.4). The root cause is insecure storage of sensitive information, allowing remote attackers to read sensitive data through an unrestricted storage mechanism. CVSS detai...

CVE-2019-7181

Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program...

CVE-2019-7181

Buffer overflow in QNAP myQNAPcloud Connect before or equal to 1.3.3.0925 allows remote attackers to crash the program (denial of service). CVSSv3 base 7.5 HIGH (Network, no auth, no user interaction). Affected product: myQNAPcloud Connect; vulnerable component/flow not detailed in initial docs b...

CVE-2019-7181

Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program...

QNAP myQNAPcloud Connect 1.3.4.0317 - 'Username/Password' Denial of Service

!/usr/bin/python Exploit Title: QNAP myQNAPcloud Connect "Username/Password" DOS Date: 19/04/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.qnap.com Version: 1.3.4.0317 and below are vulnerable Software Link: https://www.qnap.com/en/utilities/essentials Contact...

QNAP myQNAPcloud Connect 1.3.4.0317 - UsernamePassword Denial of Service

QNAP myQNAPcloud Connect 1.3.4.0317 - UsernamePassword Denial of Service !/usr/bin/python Exploit Title: QNAP myQNAPcloud Connect "Username/Password" DOS Date: 19/04/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.qnap.com Version: 1.3.4.0317 and below are...

QNAP Systems QNAP myQNAPcloud Connect Denial of Service Vulnerability

QNAP Systems QNAP myQNAPcloud Connect is an application for connecting, sharing and managing QNAP NAS files from China Weilian QNAP Systems. A security vulnerability exists in QNAP Systems QNAP myQNAPcloud Connect version 1.3.4.0317. An attacker could exploit the vulnerability to cause a denial o...

QNAP myQNAPcloud Connect 1.3.4.0317 Username/Password Denial Of Service Exploit

!/usr/bin/python Exploit Title: QNAP myQNAPcloud Connect "Username/Password" DOS Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.qnap.com Version: 1.3.4.0317 and below are vulnerable Software Link: https://www.qnap.com/en/utilities/essentials Contact:...

QNAP myQNAPcloud Connect 1.3.4.0317 Username/Password Denial Of Service

!/usr/bin/python Exploit Title: QNAP myQNAPcloud Connect "Username/Password" DOS Date: 19/04/2019 Exploit Author: Dino Covotsos - Telspace Systems Vendor Homepage: https://www.qnap.com Version: 1.3.4.0317 and below are vulnerable Software Link: https://www.qnap.com/en/utilities/essentials Contact...

QNAP QTS 4.2.x multiple Vulnerabilities

Exploit for hardware platform in category web applications QNAP QTS 4.2.x multiple vulnerabilities ======================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-42-multiple-vulnerabilities.txt Overview -------- QNAP QTS firmwa...

QNAP QTS 4.2.x XSS / Command Injection / Transport Issues

QNAP QTS 4.2.x multiple vulnerabilities ======================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-42-multiple-vulnerabilities.txt Overview -------- QNAP QTS firmware contain Missing Transport Layer Security CWE-319, Improp...