https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Thu, 17 Sep 2026 09:13:05 +0000 https://vulnerability.circl.lu/sighting/ded6832c-a33f-428c-85ba-1a08320f8afa/export {"uuid": "ded6832c-a33f-428c-85ba-1a08320f8afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ivan Huertas\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in the\\n `change_passwd` API method within the web interface of QNAP Q'Center\\n virtual appliance versions prior to 1.7.1083.\\n\\n The vulnerability allows the 'admin' privileged user account to\\n execute arbitrary commands as the 'admin' operating system user.\\n\\n Valid credentials for the 'admin' user account are required, however,\\n this module also exploits a separate password disclosure issue which\\n allows any authenticated user to view the password set for the 'admin'\\n user during first install.\\n\\n This module has been tested successfully on QNAP Q'Center appliance\\n version 1.6.1075.\", \"disclosure_date\": \"2018-07-11\", \"fullname\": \"exploit/linux/http/qnap_qcenter_change_passwd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"QNAP Q'Center change_passwd Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/qnap_qcenter_change_passwd_exec\", \"references\": [\"CVE-2018-0706\", \"CVE-2018-0707\", \"EDB-45015\", \"URL-https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities\", \"URL-https://seclists.org/fulldisclosure/2018/Jul/45\", \"URL-https://www.securityfocus.com/archive/1/542141\", \"URL-https://www.qnap.com/en-us/security-advisory/nas-201807-10\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.461952Z"} {"uuid": "ded6832c-a33f-428c-85ba-1a08320f8afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0707", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ivan Huertas\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in the\\n `change_passwd` API method within the web interface of QNAP Q'Center\\n virtual appliance versions prior to 1.7.1083.\\n\\n The vulnerability allows the 'admin' privileged user account to\\n execute arbitrary commands as the 'admin' operating system user.\\n\\n Valid credentials for the 'admin' user account are required, however,\\n this module also exploits a separate password disclosure issue which\\n allows any authenticated user to view the password set for the 'admin'\\n user during first install.\\n\\n This module has been tested successfully on QNAP Q'Center appliance\\n version 1.6.1075.\", \"disclosure_date\": \"2018-07-11\", \"fullname\": \"exploit/linux/http/qnap_qcenter_change_passwd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"QNAP Q'Center change_passwd Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/qnap_qcenter_change_passwd_exec\", \"references\": [\"CVE-2018-0706\", \"CVE-2018-0707\", \"EDB-45015\", \"URL-https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities\", \"URL-https://seclists.org/fulldisclosure/2018/Jul/45\", \"URL-https://www.securityfocus.com/archive/1/542141\", \"URL-https://www.qnap.com/en-us/security-advisory/nas-201807-10\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.461952Z"} https://vulnerability.circl.lu/sighting/ded6832c-a33f-428c-85ba-1a08320f8afa/export Tue, 08 Sep 2026 06:48:53 +0000 https://vulnerability.circl.lu/sighting/7dbbd30a-7b12-4387-be12-9cbb37c36704/export {"uuid": "7dbbd30a-7b12-4387-be12-9cbb37c36704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ivan Huertas\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in the\\n `change_passwd` API method within the web interface of QNAP Q'Center\\n virtual appliance versions prior to 1.7.1083.\\n\\n The vulnerability allows the 'admin' privileged user account to\\n execute arbitrary commands as the 'admin' operating system user.\\n\\n Valid credentials for the 'admin' user account are required, however,\\n this module also exploits a separate password disclosure issue which\\n allows any authenticated user to view the password set for the 'admin'\\n user during first install.\\n\\n This module has been tested successfully on QNAP Q'Center appliance\\n version 1.6.1075.\", \"disclosure_date\": \"2018-07-11\", \"fullname\": \"exploit/linux/http/qnap_qcenter_change_passwd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"QNAP Q'Center change_passwd Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/qnap_qcenter_change_passwd_exec\", \"references\": [\"CVE-2018-0706\", \"CVE-2018-0707\", \"EDB-45015\", \"URL-https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities\", \"URL-https://seclists.org/fulldisclosure/2018/Jul/45\", \"URL-https://www.securityfocus.com/archive/1/542141\", \"URL-https://www.qnap.com/en-us/security-advisory/nas-201807-10\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.379557Z"} {"uuid": "7dbbd30a-7b12-4387-be12-9cbb37c36704", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ivan Huertas\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a command injection vulnerability in the\\n `change_passwd` API method within the web interface of QNAP Q'Center\\n virtual appliance versions prior to 1.7.1083.\\n\\n The vulnerability allows the 'admin' privileged user account to\\n execute arbitrary commands as the 'admin' operating system user.\\n\\n Valid credentials for the 'admin' user account are required, however,\\n this module also exploits a separate password disclosure issue which\\n allows any authenticated user to view the password set for the 'admin'\\n user during first install.\\n\\n This module has been tested successfully on QNAP Q'Center appliance\\n version 1.6.1075.\", \"disclosure_date\": \"2018-07-11\", \"fullname\": \"exploit/linux/http/qnap_qcenter_change_passwd_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 13:20:20 +0000\", \"name\": \"QNAP Q'Center change_passwd Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb\", \"platform\": \"Linux\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"linux/http/qnap_qcenter_change_passwd_exec\", \"references\": [\"CVE-2018-0706\", \"CVE-2018-0707\", \"EDB-45015\", \"URL-https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities\", \"URL-https://seclists.org/fulldisclosure/2018/Jul/45\", \"URL-https://www.securityfocus.com/archive/1/542141\", \"URL-https://www.qnap.com/en-us/security-advisory/nas-201807-10\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Auto\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.379557Z"} https://vulnerability.circl.lu/sighting/7dbbd30a-7b12-4387-be12-9cbb37c36704/export Tue, 08 Sep 2026 06:48:53 +0000 https://vulnerability.circl.lu/sighting/6961f55c-960f-436e-8934-7ecdbcab4b85/export {"uuid": "6961f55c-960f-436e-8934-7ecdbcab4b85", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f777cf7-54a8-49ad-8102-f97df987e1a7", "content": "", "creation_timestamp": "2026-06-23T14:04:35.578681Z"} {"uuid": "6961f55c-960f-436e-8934-7ecdbcab4b85", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4f777cf7-54a8-49ad-8102-f97df987e1a7", "content": "", "creation_timestamp": "2026-06-23T14:04:35.578681Z"} https://vulnerability.circl.lu/sighting/6961f55c-960f-436e-8934-7ecdbcab4b85/export Tue, 23 Jun 2026 14:04:35 +0000 https://vulnerability.circl.lu/sighting/64e0882b-0996-427a-b288-bff896365b99/export {"uuid": "64e0882b-0996-427a-b288-bff896365b99", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3e23ce7-f57c-4f64-9463-648133444ef5", "content": "", "creation_timestamp": "2026-06-19T12:47:51.861296Z"} {"uuid": "64e0882b-0996-427a-b288-bff896365b99", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c3e23ce7-f57c-4f64-9463-648133444ef5", "content": "", "creation_timestamp": "2026-06-19T12:47:51.861296Z"} https://vulnerability.circl.lu/sighting/64e0882b-0996-427a-b288-bff896365b99/export Fri, 19 Jun 2026 12:47:51 +0000 https://vulnerability.circl.lu/sighting/050a8066-1db2-4b61-844a-536d88ae7aa9/export {"uuid": "050a8066-1db2-4b61-844a-536d88ae7aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/c7244416-f6dc-43cb-934d-67da8c15d123", "content": "", "creation_timestamp": "2026-06-04T20:28:00.000000Z"} {"uuid": "050a8066-1db2-4b61-844a-536d88ae7aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/c7244416-f6dc-43cb-934d-67da8c15d123", "content": "", "creation_timestamp": "2026-06-04T20:28:00.000000Z"} https://vulnerability.circl.lu/sighting/050a8066-1db2-4b61-844a-536d88ae7aa9/export Thu, 04 Jun 2026 20:28:00 +0000 https://vulnerability.circl.lu/sighting/dabab864-040c-4e08-9a40-7d7ef26d95d1/export {"uuid": "dabab864-040c-4e08-9a40-7d7ef26d95d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/b51d5ffe-e680-4249-bf5e-df1a943ebd76", "content": "", "creation_timestamp": "2026-04-17T00:17:14.000000Z"} {"uuid": "dabab864-040c-4e08-9a40-7d7ef26d95d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/b51d5ffe-e680-4249-bf5e-df1a943ebd76", "content": "", "creation_timestamp": "2026-04-17T00:17:14.000000Z"} https://vulnerability.circl.lu/sighting/dabab864-040c-4e08-9a40-7d7ef26d95d1/export Fri, 17 Apr 2026 00:17:14 +0000 https://vulnerability.circl.lu/sighting/e3c9fba2-a18b-4aff-b1d7-6c63f5e34df4/export {"uuid": "e3c9fba2-a18b-4aff-b1d7-6c63f5e34df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2018-0739", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"} {"uuid": "e3c9fba2-a18b-4aff-b1d7-6c63f5e34df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2018-0739", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01", "content": "", "creation_timestamp": "2026-03-17T12:00:00.000000Z"} https://vulnerability.circl.lu/sighting/e3c9fba2-a18b-4aff-b1d7-6c63f5e34df4/export Tue, 17 Mar 2026 12:00:00 +0000 https://vulnerability.circl.lu/sighting/653a5de4-40b3-4444-92a4-6837edca5cb8/export {"uuid": "653a5de4-40b3-4444-92a4-6837edca5cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/371a464c-9ef3-46fe-85ff-e6b11dadaf5f", "content": "", "creation_timestamp": "2026-02-02T12:28:53.523210Z"} {"uuid": "653a5de4-40b3-4444-92a4-6837edca5cb8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2018-0798", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/371a464c-9ef3-46fe-85ff-e6b11dadaf5f", "content": "", "creation_timestamp": "2026-02-02T12:28:53.523210Z"} https://vulnerability.circl.lu/sighting/653a5de4-40b3-4444-92a4-6837edca5cb8/export Mon, 02 Feb 2026 12:28:53 +0000 https://vulnerability.circl.lu/sighting/6d020622-bd11-436a-99b5-90e36b5f5110/export {"uuid": "6d020622-bd11-436a-99b5-90e36b5f5110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:54.000000Z"} {"uuid": "6d020622-bd11-436a-99b5-90e36b5f5110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0798", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:54.000000Z"} https://vulnerability.circl.lu/sighting/6d020622-bd11-436a-99b5-90e36b5f5110/export Sun, 31 Aug 2025 03:00:54 +0000 https://vulnerability.circl.lu/sighting/35c63d89-d84f-428d-8754-a7d45103507f/export {"uuid": "35c63d89-d84f-428d-8754-a7d45103507f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"} {"uuid": "35c63d89-d84f-428d-8754-a7d45103507f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0706", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:01.000000Z"} https://vulnerability.circl.lu/sighting/35c63d89-d84f-428d-8754-a7d45103507f/export Sun, 23 Feb 2025 04:10:01 +0000