1929 matches found
CVE-2023-47218
CVE-2023-47218 CVE-2023-47218: حقن أوامر غير مصادق عليه في QNAP QTS و QuTS Hero تم الإصلاح إثبات المفهوم POST /cgi-bin/quick/quick.cgi?func=switchos&todo=uploaffirmwareimage HTTP/1.1 Host: 192.168.86.42:8080 User-Agent: Mozilla Macintosh Accept: / Content-Length: 164 Content-Type:...
cve-2024-27130-poc
CVE-2024-27130-poc CVE-2024-27130 — это серьезная уязвимость, затрагивающая сетевые хранилища NAS QNAP. Уязвимость вызвана небезопасным использованием функции strcpy в функции NoSupportACL скрипта share.cgi в операционной системе QTS, что приводит к переполнению буфера в стеке. Злоумышленник може...
overkill
Overkill Overkill هو استغلال لثغرة تم إصلاحها تؤثر على QNAP QTS. بسبب الطريقة التي تكشف بها QNAP عن الثغرات، لست متأكدًا مما إذا كان لهذه المشكلة CVE أم لا. ومع ذلك، فمن المحتمل أنه تم إصلاحها في نوفمبر 2020 وأبريل 2021. تم "اكتشاف" يوم-0 n-day أثناء تحليل الفروق لـ CVE-2020-2509. هذا بالتأكيد لي...
CVE-2024-27130
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 نطالب بإعادة جميع المواطنين الذين تم احتجازهم كرهائن من قبل الجماعة الإرهابية حماس. لن نرتاح حتى يتم إطلاق سراح كل رهينة ويعود إلى منزله بأمان. يمكنك المساعدة في إعادتهم إلى الوطن.https://stories.bringthemhomenow.net/ QNAP QTS CVE-2024-27130 إثبات المفهوم 🔒 يحتوي...
QNAP QTS and QuTS Hero - OS Command Injection
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later...
QNAP QTS and Photo Station 6.0.3 - Remote Command Execution
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions. id: CVE-2019-7192 info: name: QNAP QTS and Photo Station 6.0.3 - Remote Command Execution...
CVE-2024-53691
CVE-2024-53691 https://www.qnap.com/en/security-advisory/qsa-24-28 https://vulners.com/cve/CVE-2024-53691 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N 8.7 "إذا تم استغلاله، فإن ثغرة تتبع الارتباط link following قد تسمح للمهاجمين عن بُعد الذين حصلوا على صلاحيات مستخدم بعبور نظام...
CVE-2024-38639
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
EUVD-2024-55770
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
CVE-2024-38639 QTS
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
CVE-2024-38639 QTS
An improper authentication vulnerability has been reported to affect product. The remote attackers can then exploit the vulnerability to compromise the security of the system. QTS is not affected. We have already fixed the vulnerability in the following version:...
CVE-2024-38639
CVE-2024-38639 is an improper authentication vulnerability affecting a QNAP product (identified by the CVELIST title referencing QTS and the QNAP security advisory QSA-24-37). The description explicitly states that QTS is not affected , and the vendor reports the vulnerability has been fixed in a...
Qnap QTS and QuTS hero Cross-site Scripting (CVE-2026-41539)
A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QTS...
Qnap QTS and QuTS hero Path Traversal (CVE-2026-24717)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...
Qnap QTS and QuTS hero OS Command Injection (CVE-2026-22893)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...
Qnap QTS and QuTS hero OS Command Injection (CVE-2026-24719)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...
CVE-2026-24717
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the...
CVE-2026-24719
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...