overkill

Overkill Overkill is an exploit for a patched vulnerability affecting QNAP QTS. Due to the way QNAP discloses vulnerabilities, I'm unsure if this issue has a CVE or not. However, it was likely patched in November 2020 and April 2021. The n-day was "discovered" while doing diff analysis for...

cve-2024-27130-poc

CVE-2024-27130-poc CVE-2024-27130 is a critical vulnerability affecting QNAP Network Attached Storage NAS devices. The flaw originates from the unsafe use of the strcpy function in the NoSupportACL function of the share.cgi script within the QTS operating system, leading to a stack buffer overflo...

CVE-2024-53691

CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "If exploited, the link following vulnerability could allow remote attackers who have gained user access to traverse the fi...

CVE-2023-47218

CVE-2023-47218 CVE-2023-47218: QNAP QTS and QuTS Hero Unauthenticated Command Injection FIXED POC POST /cgi-bin/quick/quick.cgi?func=switchos&todo=uploaffirmwareimage HTTP/1.1 Host: 192.168.86.42:8080 User-Agent: Mozilla Macintosh Accept: / Content-Length: 164 Content-Type:...

QNAP QTS and QuTS Hero - OS Command Injection

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later...

QNAP QTS and Photo Station 6.0.3 - Remote Command Execution

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions. id: CVE-2019-7192 info: name: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution...

CVE-2024-27130

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ QNAP QTS...

CVE-2024-38639

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...

CVE-2024-38639 QTS

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...

EUVD-2024-55770

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...

CVE-2024-38639 QTS

An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...

CVE-2024-38639

CVE-2024-38639 is an improper authentication vulnerability affecting a QNAP product (identified by the CVELIST title referencing QTS and the QNAP security advisory QSA-24-37). The description explicitly states that QTS is not affected , and the vendor reports the vulnerability has been fixed in a...

QNAP QTS - authLogin.cgi RCE Detection (CVE-2017-6361)

Detects QNAP QTS command injection via /cgi-bin/authLogin.cgi?rebootnoticemsg= base64 payload embedding echo;id&2 CVE-2017-6361 / related 2017 advisories. !/usr/bin/env python3 -- coding: utf-8 -- """QNAP QTS authLogin.cgi rebootnoticemsg RCE CVE-2017-6361 family.""" import base64 import re impor...

QNAP QTS - authLogin.cgi RCE (CVE-2017-6361)

Exploits command injection in QNAP /cgi-bin/authLogin.cgi rebootnoticemsg. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """QNAP QTS authLogin.cgi RCE CVE-2017-6361 — opens execute session.""" import base64 import re import time from kittysploit import from...

QNAP QTS/QuTS - Uninitialized quick.cgi Detection (CVE-2023-47218)

Detects an uninitialized QNAP NAS exposing /cgi-bin/quick/quick.cgi CVE-2023-47218 command injection surface. Looks for HTTP 200 with firmwareinfo or a failure/801 response to a random func parameter. !/usr/bin/env python3 -- coding: utf-8 -- """QNAP QTS/QuTS hero uninitialized quick.cgi...

QNAP QTS/QuTS - Unauth RCE via quick.cgi (CVE-2023-47218)

Exploits unauthenticated command injection in uninitialized QNAP NAS quick.cgi CVE-2023-47218. Uploads a bootstrap script under /mnt/update via multipart filename injection User-Agent Mozilla Macintosh, executes a reverse CMD payload, and waits for a shell session. !/usr/bin/env python3 -- coding...

Qnap QTS and QuTS hero Path Traversal (CVE-2026-24717)

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...

Qnap QTS and QuTS hero OS Command Injection (CVE-2026-22893)

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

Qnap QTS and QuTS hero Cross-site Scripting (CVE-2026-41539)

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QTS...

QNAP Turbo NAS Login Panel - Detect

QNAP QTS login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """QNAP QTS login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'QNAP Turbo NAS Login Panel - Detect', 'description':...