qnap

不安全 2026-01-05 阅读缓存

QNAP修复高危SQL注入和路径遍历漏洞

收藏阅读缓存
Penetration Testing 2026-01-05 vulnerability report · cve-2025-59384 · cve-2025-59387 · cybersecurity · data protection · mac security · mars · nas · path traversal · qfiling 阅读缓存

QNAP Patches High-Severity SQL Injection and Path Traversal Flaws

收藏阅读缓存
安全客-有思想的安全新媒体 2025-10-15 阅读缓存

安全公司Sekoia披露PolarEdge后门：利用定制mbedTLS实现命令与控制，已入侵思科、QNAP及群晖设备

收藏阅读缓存
Penetration Testing 2025-10-15 malware · arbitrary command execution · backdoor · cisco · custom c2 · iot · mbedtls · polaredge · qnap 阅读缓存

Sekoia Exposes PolarEdge Backdoor: Custom mbedTLS C2 Compromising Cisco, QNAP, and Synology Devices

收藏阅读缓存
Penetration Testing 2025-10-06 vulnerability report · cve-2025-57714 · dll hijacking · nas · netbak replicator · qnap · qsync central · security advisory · sql injection 阅读缓存

QNAP Fixes High-Severity Flaws: NetBak Replicator RCE and SQL Injection in Qsync Central

收藏阅读缓存
Penetration Testing 2025-08-30 vulnerability report · cve-2025-52856 · cve-2025-52861 · cybersecurity · improper authentication · nvr · path traversal · qnap · qvr · vulnerability 阅读缓存

QNAP Patches Critical Flaw (CVE-2025-52856) with CVSS 9.3

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-08-26 阅读缓存

ZDI-25-871: (Pwn2Own) QNAP QHora-322 miro_webserver_lib_RunExecBash Command Injection Remote Code Execution Vulnerability

收藏阅读缓存
V2EX 2025-08-25 阅读缓存

[NAS] QNAP 的 NAS 把我坑惨了

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-760: (Pwn2Own) QNAP TS-464 rsync Daemon Command Injection Remote Code Execution Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-759: (Pwn2Own) QNAP TS-464 Log Tool SQL Injection Remote Code Execution Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-758: (Pwn2Own) QNAP TS-464 Samba Command Argument Injection Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-757: (Pwn2Own) QNAP QHora-322 tar Command Injection Remote Code Execution Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-756: (Pwn2Own) QNAP QHora-322 Improper Restriction of Communication Channel to Intended Endpoints Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-755: (Pwn2Own) QNAP QHora-322 qsyslog-cli username Format String Remote Code Execution Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-754: (Pwn2Own) QNAP TS-464 privWizard.cgi Authentication CRLF Injection Privilege Escalation Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-753: (Pwn2Own) QNAP TS-464 Improper Handling of URL Encoding Authentication Bypass Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-752: (Pwn2Own) QNAP QHora-322 gRPC WAN_ADDR6 Command Injection Remote Code Execution Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-751: (Pwn2Own) QNAP QHora-322 IPv6 Incorrectly Specified Destination in a Communication Channel Network Spoofing Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-750: (Pwn2Own) QNAP QHora-322 lionic_dpi parseMIME Out-of-Bounds Write Remote Code Execution Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-749: (Pwn2Own) QNAP QHora-322 qfirewall Improper Restriction of Communication Channel to Intended Endpoints Firewall Bypass Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-748: (Pwn2Own) QNAP QHora-322 system.db Use of Hard-coded Cryptographic Key Authentication Bypass Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-747: (Pwn2Own) QNAP TS-464 reset_password.cgi Hard-coded Cryptographic Key Authentication Bypass Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-746: (Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Information Disclosure Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-745: (Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Information Disclosure Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-744: (Pwn2Own) QNAP TS-464 reset_password.cgi Improper Certificate Validation Authentication Bypass Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-743: (Pwn2Own) QNAP TS-464 qnap_exec Command Injection Privilege Escalation Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-742: (Pwn2Own) QNAP TS-464 Active Directory Authentication Bypass Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-741: (Pwn2Own) QNAP QHora-322 openvpn_cli user_name SQL Injection Authentication Bypass Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-740: (Pwn2Own) QNAP QHora-322 backup Use of Hard-coded Cryptographic Key Privilege Escalation Vulnerability

收藏阅读缓存
Zero Day Initiative Advisories (published) 2025-07-31 阅读缓存

ZDI-25-739: (Pwn2Own) QNAP QHora-322 Improper Restriction of Communication Channel to Intended Endpoints Remote Code Execution Vulnerability

收藏阅读缓存