CVE-2025-59382-QNAP-Password-Reset-Account-Takeover

CVE-2025-59382: QNAP पासवर्ड रीसेट से खाता अधिग्रहण अप्रमाणित हमलावर-नियंत्रित पासवर्ड रीसेट URL /cgi-bin/resetpassword.cgi में है। प्रयोगशाला में QuTScloud c5.2.4.3041 build 20250211 के विरुद्ध परीक्षण किया गया। QNAP ने बाद में इसे सलाह QSA-26-10 में CVE-2025-59382 के रूप में प्रकाशित किया।...

QNAP QuTScloud DoS Vulnerability (QSA-23-09)

QNAP QuTScloud is prone to denial of service DoS vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutscloud";...

QNAP QuTScloud Multiple Vulnerabilities (QSA-24-14, QSA-24-16)

QNAP QuTScloud is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutscloud"; ifdescripti...

QNAP QuTScloud XSS Vulnerability (QSA-24-11)

QNAP QuTScloud is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QNAP QuTScloud SSRF Vulnerability (QSA-23-51)

QNAP QuTScloud is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2023-26878

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.0.1.2514 build 20230906 QNAP QTS versions prior to 5.1.1.2491 build 20230815 QNAP QuTS hero h versions prior to h5.0.1.2515 build 20230907 QNAP QuTS hero h versions prior to h5.1.1.2488 build 20230812 QNAP QuTSclou...

QNAP QuTScloud Multiple Samba Vulnerabilities (QSA-22-03)

QNAP QuTScloud is prone to multiple vulnerabilities in Samba. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutscloud";...

QNAP QuTScloud Privilege Escalation Vulnerability (QSA-22-05)

QNAP QuTScloud is prone to a local privilege escalation vulnerability, also known as dirty pipe. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

QNAP QuTScloud XSS Vulnerability (QSA-21-63)

QNAP QuTScloud is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QNAP QuTScloud RCE Vulnerability (QSA-21-57)

QNAP QuTScloud is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...