Exploit for OS Command Injection in Zyxel Vmg8623-T50B_Firmware

CVE-2026-1459-POC POC for the CVE-2026-1459 which payload c...

CVE-2026-1459

creationtimestamp| type| source ---|---|--- 2026-02-24 06:00:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mflihj4u7u2h 2026-02-24 06:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/116124079294995359 2026-02-26 02:40:09+00:00| seen|...

CVE-2026-1459

A post-authentication command injection vulnerability in the TR-369 certificate download CGI program of the Zyxel VMG3625-T50B firmware versions through 5.50ABPM.9.7C0 could allow an authenticated attacker with administrator privileges to execute operating system OS commands on an affected device...

CVE-2025-1459

creationtimestamp| type| source ---|---|--- 2025-03-01 07:26:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6054 2025-03-01 10:35:42+00:00| seen| https://t.me/cvedetector/19226 2025-03-02 11:46:31+00:00| seen| Telegram/RqLNqylQ-LrXpTSrmMlSZTM2TTmsgC1b7DRwe3XJWNtQ1sq...

CVE-2025-1459 Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded VideoPB widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2025-1459 Page Builder by SiteOrigin <= 2.31.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded VideoPB widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2022-1459

Non-Privilege User Can View Patient’s Disclosures in GitHub repository openemr/openemr prior to 6.1.0.1...

Important: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

RHEL 8 / 9 : Red Hat JBoss Enterprise Application Platform 8.0 (RHSA-2024:2764)

The remote Redhat Enterprise Linux 8 / 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:2764 advisory. Red Hat JBoss Enterprise Application Platform 8 is a platform for Java applications based on the WildFly application runtime. This...

MSC-2024-1459

This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Malicious obfuscated code – the code is...

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories. Mitigation Mitigation for thi...

io.undertow:undertow-servlet (1.0.0.beta17), io.undertow:undertow-websockets-jsr (1.0.0.beta17) +34 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta17)

io.undertow:undertow-core MAVEN version 1.0.0.beta17 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta17 - io.undertow:undertow-websockets-jsr 1.0.0.beta17 -...

co.paralleluniverse:comsat-actors-undertow (0.1.0), io.undertow:undertow-servlet (1.0.0.beta18) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta18)

io.undertow:undertow-core MAVEN version 1.0.0.beta18 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - co.paralleluniverse:comsat-actors-undertow 0.1.0 - io.undertow:undertow-servlet 1.0.0.beta18 -...

com.github.wuic:wuic-test (>=0.5.0.rc1, <=0.5.2), io.undertow:undertow-servlet (1.0.0.final) +46 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.final)

io.undertow:undertow-core MAVEN version 1.0.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - com.github.wuic:wuic-test =0.5.0.rc1, =1.0.0, =1.0-alpha-2, =1.0-alpha-3, =4.0.0.alpha1, =4.0.0.alpha3 ...

io.undertow:undertow-servlet (1.0.0.beta30), io.undertow:undertow-websockets-jsr (1.0.0.beta30) +44 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.beta30)

io.undertow:undertow-core MAVEN version 1.0.0.beta30 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta30 - io.undertow:undertow-websockets-jsr 1.0.0.beta30 -...

io.undertow:undertow-servlet (1.0.0.alpha21), io.undertow:undertow-websockets-jsr (1.0.0.alpha21) +26 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.alpha21)

io.undertow:undertow-core MAVEN version 1.0.0.alpha21 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha21 - io.undertow:undertow-websockets-jsr 1.0.0.alpha21 -...

io.undertow:undertow-dist (1.0.0.alpha1), io.undertow:undertow-servlet (1.0.0.alpha1) +1 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.alpha1)

io.undertow:undertow-core MAVEN version 1.0.0.alpha1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-dist 1.0.0.alpha1 - io.undertow:undertow-servlet 1.0.0.alpha1 -...

io.undertow:undertow-servlet (1.0.0.alpha4), io.undertow:undertow-websockets-jsr (1.0.0.alpha4) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.0.0.alpha4)

io.undertow:undertow-core MAVEN version 1.0.0.alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha4 - io.undertow:undertow-websockets-jsr 1.0.0.alpha4 Source...

io.undertow:undertow-servlet (1.1.0.cr2), io.undertow:undertow-websockets-jsr (1.1.0.cr2) potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.1.0.cr2)

io.undertow:undertow-core MAVEN version 1.1.0.cr2 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.cr2 - io.undertow:undertow-websockets-jsr 1.1.0.cr2 Source cves:...

br.eti.clairton:ds-test (0.4.0), com.bertoncelj.wildflysingletonservice:wildfly-singleton-service (>=1.2.0, <=1.2.1) +149 more potentially affected by CVE-2024-1459 via io.undertow:undertow-core (1.4.0.final)

io.undertow:undertow-core MAVEN version 1.4.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - br.eti.clairton:ds-test 0.4.0 - com.bertoncelj.wildflysingletonservice:wildfly-singleton-service =1.2.0...