Firmware & Software

Checkmate Ransomware via SMB Services Exposed to the Internet

A new ransomware known as Checkmate has recently been brought to our attention. Preliminary investigation indicates that Checkmate ... More

christian

7. Juli 2022

2

PHP Vulnerability

A vulnerability has been reported to affect PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24, and 7.3.x below 7.3.11. If exploi ... More

christian

22. Juni 2022

DeadBolt Ransomware

QNAP recently detected a new DeadBolt ransomware campaign. According to victim reports so far, the campaign appears to target QNAP ... More

christian

17. Juni 2022

Cross-Site Request Forgery Vulnerability in Proxy Server

A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP NAS running Proxy Server. If exploited, this vu ... More

christian

26. Mai 2022

Multiple Vulnerabilities in OpenSSL

OpenSSL recently disclosed multiple vulnerabilities:   CVE-2022-1292: The c_rehash script allows command injection CVE-2022- ... More

christian

23. Mai 2022

Multiple Vulnerabilities in QTS, QuTS hero, and QuTScloud

Multiple vulnerabilities have been reported to affect QTS, QuTS hero, and QuTScloud:    CVE-2021-44051: Command in ... More

christian

6. Mai 2022

Vulnerability in Photo Station

A vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows attackers to c ... More

christian

6. Mai 2022

Multiple Vulnerabilities in Video Station

Multiple vulnerabilities have been reported to affect QNAP NAS running certain versions of Video Station. If exploited, this vulne ... More

christian

6. Mai 2022

Path Traversal Vulnerability in thttpd

A path traversal vulnerability in thttpd has been reported to affect QNAP devices running QTS, QuTS hero, and QuTScloud. If exploi ... More

christian

6. Mai 2022

Vulnerability in QVR

A vulnerability has been reported to affect QNAP VS Series NVR running QVR. If exploited, this vulnerability allows remote attacke ... More

christian

6. Mai 2022

Multiple Vulnerabilities in Netatalk

Upon the latest release of Netatalk 3.1.13, the Netatalk development team disclosed multiple fixed vulnerabilities affecting earli ... More

christian

25. April 2022

Multiple Vulnerabilities in Apache HTTP Server

The Apache Software Foundation and the Apache HTTP Server Project announced multiple vulnerabilities that have been fixed in their ... More

christian

20. April 2022

Multiple Vulnerabilities in ISC BIND

Internet Systems Consortium (ISC) recently disclosed multiple vulnerabilities in ISC BIND:   CVE-2022-0667: Assertion failur ... More

christian

19. April 2022

1

Remote Code Execution Vulnerability in Apache Struts

A remote code execution vulnerability has been reported to affect Apache Struts versions 2.0.0 to 2.5.29. A previous fix for the v ... More

christian

18. April 2022

Infinite Loop Vulnerability in OpenSSL

An infinite loop vulnerability in OpenSSL has been reported to affect certain QNAP NAS. If exploited, the vulnerability allows att ... More

christian

30. März 2022

Local Privilege Escalation Vulnerability in Linux (Dirty Pipe)

A local privilege escalation vulnerability, also known as "dirty pipe", has been reported to affect the Linux kernel on ... More

christian

14. März 2022

Local Privilege Escalation Vulnerability in Linux

  A local privilege escalation vulnerability, also known as "dirty pipe", has been reported to affect the Linux ker ... More

christian

11. März 2022

Dirty Pipe Linux Privilege Escalation

  A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization ... More

christian

10. März 2022

XSS Vulnerabilities in Proxy Server

Cross-site scripting (XSS) vulnerabilities have been reported to affect QNAP NAS running Proxy Server. If exploited, this vulnerab ... More

christian

24. Februar 2022

Improper Authentication Vulnerability in Kazoo Server

A vulnerability has been reported to affect QTS 4.5.3 and later versions, and QuTS hero h4.5.3 and later versions. If exploited, t ... More

christian

10. Februar 2022