what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 2 of 2

Files from polict

QNAP MusicStation / MalwareRemover File Upload / Command Injection

Posted May 28, 2021

Authored by polict | Site shielder.it

QNAP MusicStation and MalwareRemover are affected by arbitrary file upload and command injection vulnerabilities, leading to pre-authentication remote command execution with root privileges on the NAS.

tags | advisory, remote, arbitrary, root, vulnerability, file upload

advisories | CVE-2020-36197, CVE-2020-36198

SHA-256 | dddda20f7202ce5358af06526c5259d1f75a28b841ba2fcc6fd3fd23682bb880

Download | Favorite | View

TCPDF 6.2.19 Deserialization / Remote Code Execution

Posted Mar 22, 2019

Authored by polict | Site polict.net

TCPDF versions 6.2.19 and below suffer from a deserialization vulnerability that can allow for remote code execution.

tags | exploit, remote, code execution

advisories | CVE-2018-17057

SHA-256 | c4935b1bec468d4305cf1499300d42f521083fed9900cd9b61485ae84fe7a467

Download | Favorite | View