Motorola CX2 访问控制错误漏洞

The Motorola CX2 is a wireless router from Motorola USA. A security vulnerability in HNAP1 GetMultipleHNAPs in the Motorola CX2 router CX can be exploited to allow an attacker to access the components GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings without authentication...

File Upload Vulnerability in Station Helper Master CMS (CNVD-2021-49092)

Station Helpers CMS is a CMS open source system dedicated to creating a full-featured ... Station Helpers CMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

File Upload Vulnerability in Station Helper Master CMS (CNVD-2021-49093)

Station Helpers CMS is a CMS open source system dedicated to creating a full-featured ... Station Helpers CMS has a file upload vulnerability that can be exploited by attackers to gain control of the server...

Hebei OuRun TianTeng YunMengBar Network Studio YMBCMS Command Execution Vulnerability

YMBCMS is one of the self-developed products under Hebei OuRun TianTeng YunMengBar Network Studio.YMBCMS integrates computer station, cell phone station, WeChat public platform, small program, APP in one, sharing space, data synchronization and so on. Hebei OuRunTianTeng YunMengBar Network Studio...

Synology Download Station CGI Privilege Management Vulnerability

Synology Download Station is a download management tool for Synology. A privilege management vulnerability exists in the Synology Download Station CGI component, which can be exploited by a remote attacker to submit a special request that can be used to execute arbitrary code in the application...

Synology Download Station SSRF Vulnerability

Synology Download Station is a download management tool for Synology. A server-side request forgery vulnerability exists in the Synology Download Station task management component, which can be exploited by remote attackers to submit a special request to obtain sensitive information...

Synology Download Station Command Execution Vulnerability

Synology Download Station is a download management tool for Synology. A command execution vulnerability exists in Synology Download Station, which can be exploited by a remote attacker to submit a special request to execute arbitrary commands in the application context...

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-34811

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

CVE-2021-34811

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

Server side request forgery (ssrf)

Server-Side Request Forgery SSRF vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors...

Command injection

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

Privilege escalation

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-34809

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-34809

The CVE-2021-34809 issue affects Synology Download Station (task management component) prior to version 3.8.16-3566. It is a command injection vulnerability due to improper neutralization of special elements, allowing remote authenticated users to execute arbitrary code via unspecified vectors. I...

CVE-2021-34810

CVE-2021-34810 : A privilege-management vulnerability exists in the CGI component of Synology Download Station prior to version 3.8.16-3566. Remote authenticated users can execute arbitrary code via unspecified vectors. Affected software: Synology Download Station (on DSM). Impact is high/critica...

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...