pentester.land· Aug 4, 2022· by Jake Baines (@Junior_Baines)

QNAP Poisoned XML Command Injection (Silently Patched)

Open Original Article ↗
Target Program: QNAP
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#OS command injection#RCE

More Writeups Like This

pentester.land

Vulnerabilities in Open Source C2 Frameworks

by Laurence Tennant
pentester.land

SSD Advisory – SonicWall SMA100 Stored XSS To RCE

by SeongJoon Cho
pentester.land

Getting Unauthenticated Remote Code Execution On The Logsign Unified Secops Platform

by Yulin Sung, Mehmet INCE (@mdisec)
pentester.land

Exploiting Steam: Usual and Unusual Ways in the CEF Framework

by DARKNAVY (@DarkNavyOrg)