Security Affairs دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۸:۱۰

QNAP Warns Users as Plex2Shell Flaws Are Used to Hack NAS Devices

Taiwanese vendor QNAP urges users to update Plex Media Server after reports of NAS compromises through the Plex2Shell vulnerability chain. QNAP urges users to update Plex Media Server through the QNAP App Center after reports that threat actors exploited the Plex2Shell vulnerability chain to compromise NAS devices. “QNAP has received reports from some users that […]

Malware & Threats Vulnerabilities & Zero-Day IoT & OT Security

Read the full article at Security Affairs Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

CERT/CC Vulnerability Notes دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۵۱

VU#188754: FrodoBots EarthRover Mini+ firmware contains multiple vulnerabilities

Overview Multiple vulnerabilities in the FrodoBots EarthRover Mini+ firmware (version 6.2.4_6.2.5_0.614.0) may allow remote code execution, unauthorized access to onboard sensors, disclosure of sensitive information, and full compromise of affected devices. Exploitation may enable an attacker to remotely control the rover, access audiovisual streams, or pivot into the user’s network. Description The FrodoBots EarthRo…

Vulnerabilities & Zero-Day IoT & OT Security Web Development

Source

BleepingComputer دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۹:۳۴

Hackers exploit SSHole OpenSSH flaw to breach Linux systems

Hackers are actively exploiting the "SSHole" vulnerability (CVE-2026-123158) in OpenSSH to execute commands, steal credentials, and establish persistent access. [...]

Vulnerabilities & Zero-Day Data Breach Operating Systems

Source

eSecurityPlanet دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۸:۳۶

Dark Project Ransomware Group Offers Hackers 80% Cut of Extortion Payments

Dark Project ransomware offers affiliates 80% of extortion payments and claims 38 victims. Learn how its RaaS model works and what organizations should monitor.

Malware & Threats Ransomware

Source

CERT/CC Vulnerability Notes دوشنبه ۱۸ آبان ۱۴۰۵ · ۱۸:۲۳

VU#385711: PrestaShop Performance Debug Configuration Contains a PHP Code Injection Vulnerability

Overview PrestaShop's back-office Performance > Debug mode functionality contains a PHP code injection vulnerability. An authenticated attacker with permission to modify debug-mode configuration can submit crafted cookie configuration values that are written into an executable PHP configuration file. Successful exploitation could allow arbitrary code execution with the privileges of the PHP process. Description Prest…

Vulnerabilities & Zero-Day Databases Open Source

Source