what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files

Synology DSM 4.3-3827 Blind SQL Injection

Posted Mar 13, 2014

Authored by wiz561

Synology DSM versions 4.3-3827 and below suffer from a remote blind SQL injection vulnerability.

tags | exploit, remote, sql injection

SHA-256 | bac3d28f8c2130affcf2e2e800679a6e686cb21f15e1617359000c1ec96d3327

Download | Favorite | View

Related Files

Synology DiskStation Manager (DSM) User Enumeration

Posted Jan 8, 2018

Authored by Steve Kaun

Synology DiskStation Manager (DMS) versions prior to 6.1.3-15152 suffer from a forget_passwd.cgi user enumeration vulnerability.

tags | exploit, cgi

advisories | CVE-2017-9554

SHA-256 | badeff38c0b5be1a4c2359ece25657ca8c8f3d34316f5218270d5f7e18e562d5

Download | Favorite | View

Synology DSM 4.3-3810 Directory Traversal

Posted Dec 23, 2013

Authored by Andrea Fabrizi

Synology DSM versions 4.3-3810 and below suffer from multiple directory traversal vulnerabilities.

tags | exploit, vulnerability, file inclusion

advisories | CVE-2013-6987

SHA-256 | baddc783cba3ba3012c1d9f37e58531b749662074b81d95266d64e6544b90e21

Download | Favorite | View

Synology DSM 4.3-3776 XSS / File Disclosure / Command Injection

Posted Sep 10, 2013

Authored by Andrea Fabrizi

Synology DSM versions 4.3-3776 and below suffer from remote file download, content disclosure, cross site scripting, and command injection vulnerabilities.

tags | exploit, remote, vulnerability, xss

SHA-256 | a560d69710d4ba76ec357f35a153ec6e0a5247b97ea46b2af3a6d6381872a32a

Download | Favorite | View