CVE-2025-56099

The Ruijie RG-YST AP (version 3.0(1)B11P280YST250F ) is susceptible to an OS Command Injection vulnerability. The root cause is an unvalidated input within the pwdmodify function located in the file /usr/lib/lua/luci/modules/common.lua. An attacker can exploit this by sending a crafted POST reque...

CVE-2019-25015

LuCI in OpenWrt 18.06.0 through 18.06.4 allows stored XSS via a crafted SSID...