cve-2022-30525

CVE-2022-30525 by 1vere$k Rapid7 discovered and reported a vulnerability that affects Zyxel firewalls supporting Zero Touch Provisioning ZTP, which includes the ATP series, VPN series, and the USG FLEX series including USG20-VPN and USG20W-VPN. The vulnerability, identified as CVE-2022-30525,...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Unauthenticated Remote Command Injection Vulnerability Affected Components USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Firmware Versions ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch help...

CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...

CVE-2022-1077

containing only the translated Markdown. CVE-2022-1077 Descripción Se encontró una vulnerabilidad en TEM FLEX-1080 y FLEX-1085 1.6.0. Ha sido declarada como problemática. Esta vulnerabilidad log.cgi del componente Log Handler. Una solicitud directa conduce a la divulgación de información del...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch By Edmonds Commerce This CVE relates to a CSRF vulnerability in the Adobe Flex .swf files used by Magento. You can find more information regarding the CVE here: Peter O'Callaghan - Magento CSRF vulnerability via Adobe Flex Minded Security - The old is new, again...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Unauthenticated Remote Command Injection Affected Versions Affected Components USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Firmware Versions ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Details The vulnerability exists in the updateqrcode method of the...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Comprobación de vulnerabilidad/verificación segura e insegura: solo se usará la 'comprobación insegura' si no se verifica con la 'comprobación segura' $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 80...

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST An OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 ...

ParrotNG

ParrotNG ParrotNG is a tool capable of identifying Adobe Flex applications SWF vulnerable to CVE-2011-2461. For more details, please refer to the slides of our Troopers 2015 talk. Download the latest release from HERE. Features Written in Java, based on swfdump One JAR, two flavors: command line...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Patched version of the uploader.swf and uploaderSingle.swf to fix CVE-2011-2461 More info about the vulnerable .swf files in the Magento's core can be found here - https://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html The...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

CVE-2025-10041

CVE-2025-10041 Flex QR Code Generator = 1.2.5 - Unauthenticated Arbitrary File Upload 🚨 Flex QR Code Generator ≤ 1.2.5 - Unauthenticated Arbitrary File Upload 📝 Description The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation ...

WordPress-Flex-QR-Code-Generator---CVE-2025-10041

CVE-2025-10041: Arbitrary File Upload Vulnerability Analysis in the Flex QR Code Generator Plugin 1. Vulnerability Overview Plugin Name : Flex QR Code Generator Affected Versions : ≤ 1.2.5 all versions Vulnerability Type : Arbitrary File Upload → Remote Code Execution RCE Exploitation Conditions ...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 u...

CVE-2026-56707

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

CVE-2026-56707 Grav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

CVE-2026-56707 Grav Flex Objects 1.4.0 through 1.4.7 Authorization Bypass via Shortcode

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

CVE-2026-56707

Grav Flex Objects plugin (versions 1.4.0 through 1.4.7 ) contains an authorization bypass in the flex-objects shortcode. Any user with page-edit access can embed the shortcode in a published page to render any registered Flex collection without the permission checks enforced in the admin panel's ...