Command injection

A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect:...

Qnap Systems Malware Remover 操作系统命令注入漏洞

Qnap Systems Malware Remover is an application from the Chinese company Qnap Systems. A malware removal tool. An operating system command injection vulnerability exists in Qnap Systems Malware Remover prior to version 4.6.1.0. A remote attacker could exploit this vulnerability to execute arbitrar...

A week in security (January 18 – January 24)

Last week on Malwarebytes Labs, we looked at changes to WhatsApp’s privacy policy, we provided information about Malwarebytes being targeted by the same threat actor that was implicated in the SolarWinds breach, we told the story of ZeroLogon, looked at the pros and cons of Zoom watermarking,...