Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2017-9554 PoC — Synology DiskStation Manager 信息泄露漏洞

Source
https://github.com/rfcl/Synology-DiskStation-User-Enumeration-CVE-2017-9554-
Associated Vulnerability
Title:Synology DiskStation Manager 信息泄露漏洞 (CVE-2017-9554)
Description:An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.
Description
Tiny script to enumerate users using CVE-2017-9554 (forget_passwd.cgi)
Readme
# Synology DiskStation User Enumeration (CVE-2017-9554)

Basic script to enumerate valid users on Synology DiskStation < v6.1.3-15152
File Snapshot

 [4.0K]  /data/pocs/37da2fe2293cf2c49927a156b8fb7384d5bd07aa
├── [1.2K]  CVE-2017-9554.py
└── [ 134]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →