Best-Practices-Cybersecurity-Otanata-Project

CP3418BestPracticesCybersecurityOTANATAProject CVE-2024-3273 — Отчет об авторизованном тесте на проникновение D-Link DNS-320L NAS | Клиент: Otonata Обзор Этот репозиторий содержит полный отчет об оценке безопасности для авторизованного теста на проникновение, проведенного на устройстве D-Link...

CVE-2024-10914-EXPLOIT

CVE-2024-10914 - D-Link 원격 코드 실행 RCE 이 저장소는 D-Link NAS 장치에 영향을 미치는 중요한 취약점에 대한 개념 증명PoC 익스플로잇을 포함합니다. CVE-2024-10914 로 추적되는 이 버그는 다음 모델에 영향을 미칩니다: D-Link DNS-320 D-Link DNS-320LW D-Link DNS-325 D-Link DNS-340L 이 취약점은 /cgi-bin/accountmgr.cgi 스크립트의 일부인 cgiuseradd 함수에 있습니다. 버그는 name 매개변수가 시스템 명령어에...

(Pwn2Own) QNAP TS-453E smbd domain_name Argument Injection Authentication Bypass Vulnerability

This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of of the domainname parameter. The issue results from the la...

EUVD-2016-1855

Malware in sbrugna...

EUVD-2017-16638

Malware in sbrugna...

EUVD-2017-1881

Malware in sbrugna...

EUVD-2022-28102

Malicious code in bioql PyPI...

EUVD-2022-28105

Malicious code in bioql PyPI...

CVE-2022-22991

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

D-Link多款产品 命令注入漏洞

D-Link DNS-325 and others are a NAS Network Attached Storage device from China's D-Link Corporation. A command injection vulnerability exists in various D-Link products, which originates from a command injection vulnerability in the path parameter of the cgiunzip function in the...

Synology NAS / DiskStation Manager (DSM) Detection Consolidation

Consolidation of Synology NAS devices, DiskStation Manager DSM OS and application detections. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2022-22994

A remote code execution vulnerability was discovered on Western Digital My Cloud devices where an attacker could trick a NAS device into loading through an unsecured HTTP call. This was a result insufficient verification of calls to the device. The vulnerability was addressed by disabling checks...

CVE-2022-22991

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

CVE-2022-22991

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

Command injection

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

CVE-2022-22991 Command injection through unsecured HTTP calls on Western Digital My Cloud devices

A malicious user on the same LAN could use DNS spoofing followed by a command injection attack to trick a NAS device into loading through an unsecured HTTP call. Addressed this vulnerability by disabling checks for internet connectivity using HTTP...

D-Link DNS-320 Remote Command Injection Vulnerability

The D-Link DNS-320 NAS-device is prone to a remote command injection vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

CVE-2016-10861

Neet AirStream NAS1.1 devices allow CSRF attacks that cause the settings binary to change the AP name and password...

CVE-2018-14839

LG N1A1 NAS 3718.510 is affected by: Remote Command Execution. The impact is: execute arbitrary code remote. The attack vector is: HTTP POST with parameters...

Drobo NAS Detection (NASd)

NASd based detection of Drobo NAS devices. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.142077...