CVE-2024-3273

Эксплойт выполнения команд на D-Link NAS Этот скрипт на Python эксплуатирует уязвимость CVE-2024-3273 в устройствах D-Link NAS, позволяя выполнять произвольные команды. Он использует уязвимость для удаленного выполнения команд на затронутых устройствах. Возможности Выполняет произвольные команды ...

Western Digital MyCloud NAS - Authentication Bypass

It was discovered that the Western Digital My Cloud device before 2.30.196 is affected by an authentication bypass vulnerability. An unauthenticated attacker can exploit this vulnerability to authenticate as an admin user without needing to provide a password, thereby gaining full control of the...

CVE-2024-29973

CVE-2024-29973 - 원격 명령 주입 취약점 설명 CVE-2024-29973은 특정 Zyxel 네트워크 장치에서 발견된 치명적인 취약점입니다. 이 취약점은 펌웨어의 부적절한 입력 검증 메커니즘을 악용하여 인증되지 않은 공격자가 대상 장치에서 임의의 명령을 실행할 수 있게 합니다. 공격자는 특수하게 제작된 HTTP 요청을 장치에 전송하여 시스템 수준의 명령을 주입하고, 잠재적으로 장치에 대한 완전한 제어 권한을 획득할 수 있습니다. Dorks Hunter: product.name="ZyXEL...

CVE-2023-6538

CVE-2023-6538 CVE-2023-6538 — это Insecure Direct Object Reference IDOR уязвимость, обнаруженная в функции Configuration Backup & Restore System Management Unit SMU Hitachi NAS HNAS. Данная уязвимость затрагивает версии SMU до 14.8.7825.01. Эксплуатация Данный эксплойт требует, чтобы злоумышленни...

D-Link-NAS-CVE-2024-10914-

D-Link-NAS-CVE-2024-10914- 이것은 D-Link RCE 취약점 탐지 프로그램입니다. 취약점 개요 D-Link DNS-320 등은 중국 D-Link사의 NAS네트워크 연결 저장장치 제품입니다. D-Link의 여러 제품에 보안 취약점이 존재하며, 이 취약점은 name 매개변수에 대한 잘못된 조작으로 인해 운영체제 명령어 주입이 발생합니다. 영향을 받는 제품 및 버전은 다음과 같습니다: D-Link DNS-320, DNS-320LW, DNS-325 및 DNS-340L 20241028 버전 및 이전 버전 네트워크 ...

CVE-2023-5808

CVE-2023-5808 CVE-2023-5808 — это Insecure Direct Object Reference IDOR уязвимость, обнаруженная в функции Backup & Restore System Management Unit SMU Hitachi NAS HNAS. Эта уязвимость затрагивает версии SMU до 14.8.7825.01. Эксплуатация Для эксплуатации этой уязвимости атакующему необходим контро...

CVE-2026-82692

D-Link DNS-340L and DNS-345 (versions up to 20260717 ) are vulnerable to an OS command injection in the CGI script /cgi-bin/iscsi_mgr.cgi . By manipulating the arguments alias , username , password , or volume_location , an attacker can inject and execute arbitrary OS commands. The attack can be ...

EUVD-2026-68485

A vulnerability has been found in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected by this issue is some unknown functionality of the file /cgi-bin/usbdevice.cgi of the component CGI Handler. Such manipulation of the argument fupsip leads to os command injection. The attac...

EUVD-2026-68481

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30062

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

EUVD-2026-67110

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted Registration Request message...

CVE-2026-30059

free5gc v4.0.1 , an open-source 5G Core implementation, contains a vulnerability in its NAS decoder component that allows a remote attacker to trigger a Denial of Service by sending a crafted Registration Request message. The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector requiring no ...

CVE-2026-30062

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

EUVD-2026-67112

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted NAS PDU...

CVE-2026-30062

CVE-2026-30062 affects the NGAP handler in free5gc v4.0.1 , an open-source 5G Core implementation. An unauthenticated remote attacker can send a crafted NAS PDU to trigger a Denial of Service , with the CVSS 3.1 score of 7.5 (HIGH) reflecting a network attack vector requiring no privileges or use...

Zyxel NAS Firmware 5.21- Remote Code Execution

Multiple Zyxel network-attached storage NAS devices running firmware version 5.21 contain a pre-authentication command injection vulnerability, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable device. Zyxel NAS devices achieve authentication by using th...

CVE-2026-47359

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache CloudStack's NAS backup provider plugin. The addBackupRepository API available since 4.20.0.0 and updateBackupRepository API introduced in 4.22.0.0 accept unsanitized command options f...

CVE-2026-47359

An OS Command Injection vulnerability exists in Apache CloudStack's NAS backup provider plugin . The addBackupRepository API (available since 4.20.0.0) and updateBackupRepository API (introduced in 4.22.0.0) accept unsanitized mount command options for backup repositories. A malicious operator ac...