CVE-2015-6912

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitlecodepage parameter to subtitle.cgi...

Synology Video Station 1.5-0757 Command Injection / SQL Injection

------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...

Synology Video Station 1.5-0757 - Multiple Vulnerabilities

Synology Video Station 1.5-0757 - Multiple Vulnerabilities ------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahi...

Synology Video Station 1.5-0757 - Multiple Vulnerabilities

------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin, September 2015...

Synology Video Station 1.5-0757 - Multiple Vulnerabilities

Exploit for cgi platform in category web applications ------------------------------------------------------------------------ Synology Video Station command injection and multiple SQL injection vulnerabilities ------------------------------------------------------------------------ Han Sahin,...

Generalized SQL Injection Vulnerability in VNet Series WEB Management System of Guangzhou Zhonghaida Satellite Navigation Technology Co.

COSHIDA VNet6 Professional Reference Station Receiver is one of COSHIDA's new VNet series of measurement systems, and it is also a professional reference station receiver specially designed for reference station applications. A generic SQL injection vulnerability exists in the pid parameter of th...

An interesting a General-purpose built Station system SQL injection vulnerability-vulnerability warning-the black bar safety net

A friend bought a treadmill, and then the feeling of being fucked, and then I by the way had a look at the official website, and actually found a very interesting injection vulnerabilities. Website use is a local small developers to develop their own generic built Station system, check the clouds...

Schneider Electric Modicon M340 PLC Station P34模块Web Servers安全漏洞

漏洞详情：Schneider Electric Modicon M340 PLC Station P34 module是法国施耐德电气（Schneider Electric）公司的一款可编程控制器。Schneider Electric Modicon M340 PLC Station P34模块中存在安全漏洞。远程攻击者可利用该漏洞获取敏感信息，在Web服务器进程上下文中执行任意代码，绕过身份验证机制，获取受影响设备的访问权限。漏洞类型远程利用影响硬编码身份认证是远程代码执行本地文件包含否目录遍历/文件篡改远程代码包含是远程代码执行/拒绝服务攻击跨站脚本攻击是获取敏感信息影响设备版本：...

[SECURITY] Fedora 22 Update: icecast-2.4.2-1.fc22

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

[SECURITY] Fedora 21 Update: icecast-2.4.2-1.fc21

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

NAP Turbo NAS Series Devices File Station Directory Traversal Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An input validation vulnerability exists in NAP Turbo NAS Series Devices File Station, which could be exploited by remote attackers to submit a special request to view syst...

NAP Turbo NAS Series Devices Music Station Directory Traversal Vulnerability

NAP Turbo NAS Series Devices is a backup software that supports real-time backup, data synchronization and scheduled backup. An input validation vulnerability exists in NAP Turbo NAS Series Devices Music Station, which could be exploited by remote attackers to submit a special request to view...

sicetelecom.it XSS vulnerability

Vulnerable URL: http://www.sicetelecom.it/hotspot/sms-station!prettyPhoto/0,%3Cimg%20src=x%20onerror=alert%28/XSSPOSED/%29%3E/ Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:19 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

Hangzhou Boce Network Technology Co., Ltd. station-building system / bocadmin/j/uploadify.php there are arbitrary file upload vulnerability

BOC is a system of Hangzhou Bocai Network Technology Co., Ltd. that provides professional website construction services. The website building system /bocadmin/j/uploadify.php of Hangzhou Bocai Network Technology Co., Ltd. has an arbitrary file upload vulnerability, which allows an attacker to...

Multiple Cross-Site Scripting Vulnerabilities in Synology Photo Station-2945

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology. A cross-site scripting vulnerability exists in Synology Photo Station versions prior to 6.3-2945, which allows remote attackers to inject arbitrary web script or HTML via loginphp or...

Technical analysis: Femtocell home base station to a communication to intercept, fake arbitrary SMS vulnerability-vulnerability warning-the black bar safety net

Ali mobile security team with the Chinese Thiel Laboratory of wireless technology Ministry of communication experts together, the combination of domestic operator a type of Femtocell base station for the security analysis, found that the more pieces of the major vulnerabilities that can lead to...

Femtocell home base station to a communication to intercept, fake arbitrary SMS vulnerability-vulnerability warning-the black bar safety net

Ali mobile security team with the Chinese Thiel Laboratory of wireless technology Ministry of communication experts together, the combination of domestic operator a type of Femtocell base station for the security analysis, found that the more pieces of the major vulnerabilities that can lead to...

CVE-2015-4656

Multiple cross-site scripting XSS vulnerabilities in Synology Photo Station before 6.3-2945 allow remote attackers to inject arbitrary web script or HTML via the 1 success parameter to login.php or 2 crafted URL parameters to index.php, as demonstrated by the t parameter to photo/...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Synology Photo Station before 6.3-2945 allow remote attackers to inject arbitrary web script or HTML via the 1 success parameter to login.php or 2 crafted URL parameters to index.php, as demonstrated by the t parameter to photo/...

CVE-2015-4656

Synology Photo Station prior to version 6.3-2945 contains XSS vulnerabilities. The issue allows remote attackers to inject arbitrary web script or HTML via (1) the success parameter to login.php or (2) crafted URL parameters to index.php, demonstrated by the t parameter to photo/. The CVE-2015-46...