PT-2019-18460 · Synology · Music Station

Name of the Vulnerable Software and Affected Versions: Music Station versions prior to the latest version Description: This issue allows remote attackers to inject and execute scripts on the administrator’s management console through a cross-site scripting XSS vulnerability in Music Station...

QNAP QTS Music Station XSS Vulnerability (NAS-201911-27)

QNAP Music Station is prone to a cross-site scripting vulnerability on the administrator Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later Thi...

CVE-2018-0729

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

CVE-2018-0729

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

CVE-2018-0730

This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions...

CVE-2018-0730

This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions...

Command injection

This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions...

Command injection

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

CVE-2018-0730

The CVE-2018-0730 entry describes a command-injection vulnerability in QNAP QTS File Station. An attacker can execute arbitrary commands on the affected device. Root cause is not elaborated beyond an input handling issue in File Station; multiple sources (NVD entry, Red Hat advisory, Tenable plug...

CVE-2018-0730

This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions...

CVE-2018-0729

CVE-2018-0729 affects QNAP Music Station and describes a remote command execution (RCE) via a command injection vulnerability. Multiple connected sources identify Music Station as the affected component and state that an attacker could execute commands on the affected device. The remediation is t...

CVE-2018-0729

This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions...

You’re In Safe Hands with Trend Micro Home Network Security

A three-part series on using Home Network Security to protect your home Your home should be a haven that protects you. In the cyber age, however, your router, computers, and TVs, your game consoles and smart devices, are continuously connected to the internet and run the risk of being...

UBUNTU-CVE-2019-14896

A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service system crash or, possibly execute arbitrary code, when the lbsibssjoinexisting function is called after a STA connects to...

XSS Vulnerability in Station Hi Display Building System

The Station Hi Showcase website builder is a self-service free website builder. A XSS vulnerability exists in StationHi Presentation builder, which can be exploited by attackers to inject arbitrary web script or HTML...

QNAP QTS and Photo Station Local File Inclusion

This module exploits a local file inclusion in QNAP QTS and Photo Station that allows an unauthenticated attacker to download files from the QNAP filesystem. Because the HTTP server runs as root, it is possible to access sensitive files, such as SSH private keys and password hashes. This module h...

The vulnerability of the SIMATIC IT UADM software, related to the predictable encryption key, allows a hacker to recover the password and gain access to the TeamCenter station.

The vulnerability of the SIMATIC IT UADM software is related to a predictable encryption key. Exploiting this vulnerability could allow an attacker to retrieve the password and gain access to the TeamCenter station...

Multiple QNAP Products NAS-201911-20 Multiple Security Vulnerabilities

Description Multiple QNAP products are prone to multiple security vulnerabilities. An attacker may leverage these issues to execute arbitrary commands or gain unauthorized access to the affected device. Technologies Affected Qnap Helpdesk 1.0.06 Qnap Helpdesk 1.1.01 Qnap Helpdesk 1.2.0 Qnap...

Ocean Blue website builder system has a logic flaw vulnerability

Ocean Blue Station Building System is a station building system opened by Shenzhen Ocean Blue Technology Co. Ocean Blue website builder system has a logic flaw vulnerability. Attackers can use the vulnerability to obtain sensitive information...

Wuxi Time Network Technology Co., Ltd. website building system has SQL injection vulnerabilities

Time Network is a service outsourcing enterprise that integrates the development of network application technology, creative website design, network marketing and promotion services, and provides a full set of network marketing solutions, and is a professional company that focuses on...