← All credits

HAK-MZ Team

5 vulnerability records and advisories credit this contributor.

An improper neutralization of input during web page generation vulnerability in the Audio Player in Synology DiskStation Manager (DSM) before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write specific files.

Stored Cross-Site Scripting (XSS) in Note Station file upload functionality

Privilege Escalation via QuFTP Log-based XSS

Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint