The vulnerability of the /sysinit.html file in the microprogramming software for WAVLINK routers, WL-WN578W2, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the /sysinit.html file in the microprogramming software for WAVLINK WL-WN578W2 is related to the lack of a mechanism for recovering passwords when processing the newpass/confpass parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

EUVD-2025-29067

Malicious code in bioql PyPI...

Wavlink WL-WN578W2 Authorization Issues Vulnerability

The Wavlink WL-WN578W2 is a wireless repeater from China's Wavlink. An authorization issue vulnerability exists in Wavlink WL-WN578W2 version 221110, which stems from improper privilege management of the parameter newpass/confpass in the file /sysinit.html, which can be exploited by an attacker t...

CVE-2025-10322

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

CVE-2025-10322 Wavlink WL-WN578W2 sysinit.html password recovery

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

CVE-2025-10322: Weak Password Recovery Mechanism for Forgotten Password

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

CVE-2019-7385

An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U2.0.0140521R4.1.47.002 or below, The values of the newpass and confpass parameters in /bin/WebMGR are used in a syst...

PT-2019-18570 · Raisecom · Raisecom Iscom Ht803G Gpon +2

Name of the Vulnerable Software and Affected Versions: Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with firmware version ISCOMHT803G-U 2.0.0 140521 R4.1.47.002 or below Description: An authenticated shell command injection issue has been discovered. The values of the...

CVE-2019-7385: Improper Neutralization of Special Elements used in an OS Command

An authenticated shell command injection issue has been discovered in Raisecom ISCOM HT803G-U, HT803G-W, HT803G-1GE, and HT803G GPON products with the firmware version ISCOMHT803G-U2.0.0140521R4.1.47.002 or below, The values of the newpass and confpass parameters in /bin/WebMGR are used in a syst...

Raisecom Technology GPON-ONU HT803G-07 Command Injection Vulnerability (CNVD-2019-05548)

Raisecom Technology is a supplier of access equipment, solutions and services. A command injection vulnerability exists in the 'newpass' and 'confpass' parameters of /bin/WebMGR in the Raisecom Technology GPON-ONU HT803G-07. An attacker could exploit this vulnerability to execute code...