EUVD-2020-20166

Malware in sbrugna...

EUVD-2020-20167

Malware in sbrugna...

Synology SafeAccess SQL Injection Vulnerability

Synology SafeAccess is an appliance from China-based Synology Inc. that can configure the security of your network environment. The appliance can monitor users' Internet behavior, set Internet schedules and time quotas, apply web filters to protect specific users, and protect all devices in the...

CVE-2020-27660

SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2020-27660

SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2020-27659

Multiple cross-site scripting XSS vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 profile parameter...

CVE-2020-27659

Multiple cross-site scripting XSS vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 profile parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 profile parameter...

Sql injection

SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2020-27659

Multiple cross-site scripting XSS vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the 1 domain or 2 profile parameter...

CVE-2020-27659

CVE-2020-27659 is corroborated by a TALOS advisory (TALOS-2020-1087) detailing an exploitable SQL injection in the SafeAccess SRM package (Synology SRM 1.2.3 RT2600ac with SafeAccess 1.2.1-0220). The vulnerability occurs in the request.cgi handling of the domain parameter, where user-controlled i...

CVE-2020-27660

SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter...

CVE-2020-27660

CVE-2020-27660 is an SQL injection in Synology SafeAccess’ request.cgi that accepts a domain parameter and constructs an SQL query without proper escaping, enabling remote attackers to execute arbitrary SQL. The linked TALOS advisory TALOS-2020-1087 describes a SafeAccess SRM 1.2.1-0220 package s...

Synology SafeAccess SQL注入漏洞

Synology SafeAccess is an appliance from China-based Synology Inc. that can configure the security of your network environment. The appliance can monitor users' Internet behavior, set Internet schedules and time quotas, apply web filters to protect specific users, and protect all devices in the...