cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130は、QNAPのネットワークアタッチストレージ（NAS）デバイスに影響を与える深刻な脆弱性です。この脆弱性は、QTSオペレーティングシステムのshare.cgiスクリプト内のNoSupportACL関数におけるstrcpy関数の安全でない使用に起因し、スタックバッファオーバーフローを引き起こします。攻撃者は巧妙に細工されたリクエストを送信することで、標的のシステム上で任意のコードを実行し、影響を受けるデバイスを完全に制御することができます。 この脆弱性の主な影響は以下のとおりです。 リモートコード実行（RCE）...

overkill

オーバーキル Overkillは、QNAP QTSに影響を与えるパッチ適用済みの脆弱性のエクスプロイトです。QNAPの脆弱性開示方法により、この問題にCVEがあるかどうかは不明です。ただし、2020年11月と2021年4月にパッチが適用された可能性があります。このn-dayは、CVE-2020-2509の差分分析中に「発見」されました。これはほぼ間違いなくCVE-2020-2509ではありません。 このエクスプロイトは、/cgi-bin/qnapmsg.cgi?lang=xxx にHTTP GETリクエストを送信し、これによりパッチ未適用のQNAPデバイスが安全でないHTTP経由で...

CVE-2024-27130

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 テロ組織ハマスによって人質に取られたすべての市民の安全な帰還を要求します。すべての人質が解放され、無事に帰宅するまで、私たちは休みません。あなたも彼らを家に連れ戻す手助けができます。https://stories.bringthemhomenow.net/ QNAP QTS CVE-2024-27130 PoC 🔒 このリポジトリには、QNAP QTS に影響する脆弱性 CVE-2024-27130 を悪用するための概念実証（PoC）スクリプトが含まれています。この脆弱性により、攻撃者は root...

CVE-2023-47218

CVE-2023-47218 CVE-2023-47218: QNAP QTS および QuTS Hero における未認証コマンドインジェクション 修正済み POC root@kitploit: POST /cgi-bin/quick/quick.cgi?func=switchos&todo=uploaffirmwareimage HTTP/1.1 Host: 192.168.86.42:8080 User-Agent: Mozilla Macintosh Accept: / Content-Length: 164 Content-Type:...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "If exploited, the link following vulnerability could allow remote attackers who have gained user access to traverse the fi...

Qnap QTS and QuTS hero Cross-site Scripting (CVE-2026-41539)

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QTS...

QNAP Systems QTS和QNAP Systems QuTS hero 操作系统命令注入漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are software products with data storage and management functions developed by QNAP Systems, a company based in Taiwan, China. Both products have an operating system command injection vulnerability. This vulnerability stems from command injection, which...

QNAP QTS 安全漏洞

QNAP Systems QTS is a software with data storage and management capabilities developed by QNAP Systems, a company based in Taiwan, China. Versions of QNAP Systems QTS prior to 5.2.7.3256 contained a security vulnerability. This vulnerability stemmed from command injection, which could allow remot...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are software products with data storage and management functions developed by QNAP Systems, a company based in Taiwan, China. Both QNAP Systems QTS and QNAP Systems QuTS hero have security vulnerabilities; these vulnerabilities stem from command injecti...

Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2025-48725)

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QuTS hero...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS Hero are both software products with data storage and management functions developed by QNAP Systems, a company based in Taiwan, China. There were security vulnerabilities in versions of QNAP Systems QTS 5.2.8.3332 and QNAP Systems QuTS Hero h5.2.8.3321. The...

Qnap QTS and QuTS hero Exposure of Sensitive Information to an Unauthorized Actor (CVE-2024-13086)

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later...

Qnap QTS and QuTS hero Stack-based Buffer Overflow (CVE-2025-62852)

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Q...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52426)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53405)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Qnap QTS and QuTS hero Out-of-bounds Read (CVE-2025-54166)

An out-of-bounds read vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following versions: QTS...

Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2025-53591)

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabili...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53590)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

Qnap QTS and QuTS hero Improper Limitation of a Pathname to a Restricted Directory (CVE-2023-51365)

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions:...

Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52866)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...