Install the app
How to install the app on iOS

Follow along with the video below to see how to install our site as a web app on your home screen.

Note: This feature may not be available in some browsers.

Synology Security Synology-SA-24:21 Synology Drive Server (PWN2OWN 2024)

Synology RSS

Synology RSS

377
18
www.synology.com
Multiple vulnerabilities allow remote attackers to hijack web sessions and inject SQL commands via a susceptible version of Synology Drive Server. The vulnerability reported by PWN2OWN 2024 (ZDI-CAN-25613) has been addressed. Update of Synology Drive Server for DSM 7.1 will be published within 30 days.

Continue reading...
- - -
Synology Product Security Advisory: check the list

Source: synology.com
 

Create an account or login to comment

You must be a member in order to leave a comment

Create account

Create an account on our community. It's easy!

Register

Log in

Already have an account? Log in here.

Popular tags from this forum

dsm server srm station

Similar threads

Synology RSS
Synology Security Synology-SA-24:10 Synology Drive Client
Multiple vulnerabilities allow remote attackers to conduct denial-of-service attacks, remote authenticated...
Replies
0
Views
392
Synology RSS
Synology RSS
Synology RSS
Synology Security Synology-SA-24:27 DSM
A vulnerability allow remote attackers to conduct denial-of-service attacks. A vulnerability allow remote...
Replies
0
Views
134
Synology RSS
Synology RSS
Synology RSS
Synology Security Synology-SA-24:26 BeeDrive for desktop
A vulnerability allows local users to execute arbitrary code. A vulnerability allows local users to...
Replies
0
Views
70
Synology RSS
Synology RSS
Synology RSS
Synology Security Synology-SA-24:25 Surveillance Station
Those of you who use Surveillance Station as a motion event in SS Cameras... (Even though it's been...
Replies
1
Views
111
Jan Janowski
Jan Janowski
Synology RSS
Synology Security Synology-SA-24:24 Synology Camera (PWN2OWN 2024)
Multipe vulnerabilities allow remote attackers to execute arbitrary code or execute arbitrary commands on...
Replies
0
Views
121
Synology RSS
Synology RSS
Synology RSS
Synology Security Synology-SA-24:23 BeeStation (PWN2OWN 2024)
The vulnerability reported in ZDI-CAN-25403 allows remote attackers to execute arbitrary code. The...
Replies
0
Views
204
Synology RSS
Synology RSS
Synology RSS
Synology Security Synology-SA-24:22 Replication Service (PWN2OWN 2024)
A vulnerability allows remote attacker to execute arbitrary commands via a susceptible version of...
Replies
0
Views
169
Synology RSS
Synology RSS

Thread Tags

Tags Tags
pwn2own remote security sql injection vulnerabilities web session hijacking

Welcome to SynoForum.com!

SynoForum.com is an unofficial Synology forum for NAS owners and enthusiasts.

Registration is free, easy and fast!

Register

Trending content in this forum

Back
Top