CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php

Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of...

CVE-2023-7330 Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php

Ruijie NBR series routers contain an unauthenticated arbitrary file upload vulnerability via /ddi/server/fileupload.php. The endpoint accepts attacker-supplied values in the name and uploadDir parameters and saves the provided multipart file content without adequate validation or sanitization of...

CVE-2023-7330

CVE-2023-7330 affects Ruijie NBR series routers. An unauthenticated arbitrary file upload vulnerability exists via /ddi/server/fileupload.php where attacker-controlled values in the name and uploadDir parameters are accepted and the multipart file content is saved without proper validation or san...

EUVD-2025-19723

Malicious code in bioql PyPI...

CVE-2025-34057 Ruijie NBR Router Administrative Credential Disclosure

An information disclosure vulnerability exists in Ruijie NBR series routers known to affect NBR2000G, NBR1300G, and NBR1000 models via the /WEBVMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker ca...

CVE-2025-34057 Ruijie NBR Router Administrative Credential Disclosure

An information disclosure vulnerability exists in Ruijie NBR series routers known to affect NBR2000G, NBR1300G, and NBR1000 models via the /WEBVMS/LEVEL15/ endpoint. By crafting a specific POST request with modified Cookie headers and specially formatted parameters, an unauthenticated attacker ca...

CVE-2025-34057

CVE-2025-34057 affects Ruijie NBR series routers (NBR2000G, NBR1300G, NBR1000) via the /WEB_VMS/LEVEL15/ endpoint. Affected component is the backend handling of a POST request with modified Cookie headers and specially formatted parameters, leading to an information disclosure where an unauthenti...

Ruijie NBR Router 安全漏洞

Ruijie NBR Router is a wireless router from Ruijie China. A security vulnerability exists in the Ruijie NBR Router that originates from improper authentication checking and could lead to information disclosure...

PT-2025-27625 · Ruijie · Ruijie Nbr Series

Name of the Vulnerable Software and Affected Versions: Ruijie NBR series routers versions NBR2000G, NBR1300G, and NBR1000 Description: An information disclosure issue exists via the "/WEB VMS/LEVEL15/" endpoint. By crafting a specific POST request with modified Cookie headers and specially...

多款Ruijie产品 安全漏洞

Ruijie Networks EG210G-P is a Gigabit PoE router from Ruijie Networks China. A security vulnerability exists in multiple Ruijie products, which stems from a vulnerability that allows an attacker to hijack a TCP session, potentially resulting in a denial of service attack. The following products a...

Command Execution Vulnerability in Ruijie NBR Routers (CNVD-2021-58700)

Ltd. is a professional network vendor with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, etc. A command execution vulnerability exists in Ruijie NBR routers, which can be exploited by attackers...

SQL Injection Vulnerability in Riptide NBR Routers

Ruijie Networks Co., Ltd. is a professional network manufacturer with a full range of network equipment product lines and solutions, including switches, routers, software, security firewalls, wireless products, storage, and so on. A SQL injection vulnerability exists in Ruijie NBR routers, which...