CVE-2024-24431

Open5GS v2.7.0 is affected by a DoS in the ogs_nas_emm_decode (ogs nas emm decode) function triggered by a crafted NAS packet with a zero-length EMM message length. The issue is a reachable assertion in that function, allowing attackers to cause Denial of Service. No exploit details are provided ...

CVE-2024-24425

CVE-2024-24425 affects Magma v1.8.0 and OpenAirInterface (OAI) EPC Federation v1.20. It is caused by an out-of-bounds read in amf_as_establish_req (file /tasks/amf/amf_as.cpp) that can allow a attacker to trigger a Denial of Service via specially crafted NAS packets. Multiple sources (Red Hat, SU...

CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24431

A reachable assertion in the ogsnasemmdecode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service DoS via a crafted NAS packet with a zero-length EMM message length...

CVE-2024-24431

A reachable assertion in the ogsnasemmdecode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service DoS via a crafted NAS packet with a zero-length EMM message length...

CVE-2024-10916

A vulnerability classified as problematic has been found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. This affects an unknown part of the file /xml/info.xml of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiat...

CVE-2024-10915

CVE-2024-10915 affects D-Link NAS models DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. The vulnerability is in the function; the group parameter in the endpoint /cgi-bin/account_mgr.cgi?cmd=cgi_user_add can be manipulated to cause an OS command injection, enabling remote code execution...

D-Link多款产品 安全漏洞

D-Link DNS-320 and others are a NAS Network Attached Storage device from China's AUO D-Link. A security vulnerability exists in various D-Link products, which stems from an incorrect operation of the parameter group that can lead to operating system command injection. The following products and...

Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

Taiwanese network-attached storage NAS appliance maker Synology has addressed a critical security flaw impacting DiskStation and BeePhotos that could lead to remote code execution. Tracked as CVE-2024-10443 and dubbed RISK:STATION by Midnight Blue, the zero-day flaw was demonstrated at the Pwn2Ow...

Qnap QTS Improper Restriction of Rendered UI Layers or Frames (CVE-2018-19957)

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...

Qnap QTS Cleartext Storage of Sensitive Information (CVE-2018-19941)

A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 bui...

Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17027)

A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. This plugin only works with Tenable.ot. Please visit...

Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17029)

A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 Beta 2 build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices. This plugin only works with Tenable.ot. Please visit...

Qnap QTS SQL Injection (CVE-2020-36195)

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

Synology Multiple NAS Servers Credentials Management Errors (CVE-2016-6554)

Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:blank and admin:blank . A remote network attacker can gain privileged access to a vulnerable device. This plugin only works with...

Exploit for Command Injection in Dlink Dns-320L_Firmware

CVE-2024-3273 - D-Link Remote Code Execution RCE Exploit...

Synology NAS / DiskStation Manager Detection (findhostd)

findhostd based detection of Synology NAS devices, DiskStation Manager DSM OS and application. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

QNAP QTS and QuTS hero OS command injection vulnerability (CNVD-2025-27829)

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS and QuTS hero OS command injection vulnerability (CNVD-2025-27834)

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

QNAP QTS and QuTS hero operating system command injection vulnerability

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...