CVE-2026-92379

An improper neutralization of input during web page generation vulnerability in the Notification API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-86343

An improper neutralization of CRLF sequences vulnerability in the SNMP API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users with administrator privileges to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-87801

An insertion of sensitive information into sent data vulnerability in the API framework in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read arbitrary files...

CVE-2026-74857

A missing critical step in authentication vulnerability in the Auth API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-76954

An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology DiskStation Manager DSM before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read or write arbitrary files and conduct denial-of-service...

CVE-2026-77738

A server-side request forgery vulnerability in the Credential API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-81557

An improper neutralization of input during web page generation vulnerability in the DSMNotify in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-18792

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-19833

A missing authorization vulnerability in the ACL API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-74850

An improper limitation of a pathname to a restricted directory vulnerability in the contentextract in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read specific files...

CVE-2026-13672

An authorization bypass through user-controlled key vulnerability in the SSOAuth in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

CVE-2026-15201

An improper certificate validation vulnerability in the Support Form in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows man-in-the-middle attackers to read arbitrary files and write specific files during support form submission...

CVE-2026-13656

An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files...

CVE-2026-124993

An incorrect authorization vulnerability in the Security Advisor in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote attackers to read specific files...

EchoDrv

EchoDrv Tool permitting to abuse Kernel read/write vulnerability in ECHOAC anti-cheat driver echodriver.sys Usage Example Sponsors I work at POST Luxembourg and thank them for allocating some time for me to develop and maintain this project! Visit POST website at...

CVE-2024-24919-Sniper

CVE-2024-24919-Sniper Overview CVE-2024-24919 Sniper is a Python script designed to scan for Check Point Security Gateway Information Disclosure vulnerabilities. This script can perform both single-target and bulk scanning, utilizing multithreading to improve scanning speed. It supports various...

CVE-2021-41277

CVE-2021-41277 MetaBase Arbitrary File Read A small script I wrote myself; it's not well written, so please feel free to point out any issues. Disclaimer : The techniques provided are for learning and reference testing only. Any direct or indirect losses caused by using the information provided i...

CVE-2025-2539

POC - CVE-2025-2539 File Away Disclaimer : This Proof of Concept POC is made for educational and ethical testing purposes only. Usage of this tool for attacking targets without prior mutual consent is illegal. It is the end user’s responsibility to obey all applicable local, state, and federal...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in postcss (CVE-2026-69153)

Summary A path traversal and source-map file read vulnerability in the postcss package CVE-2026-69153 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.5.23 in FP-15 on both Linux and Windows operating systems. Vulnerability Details...

CVE-2026-85101

An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager DSM before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read specific files, write arbitrary files, and conduct limited...