182 matches found
RG-UAC Ruijie - Password Hashes Leak Detection
Multiple Firewall Devices from vendor Ruijie Networks are affected by an information leakage vulnerability where credentials are included in the source code of the web admin login interface usernames, roles, MD5 hashes and additional details of each user. Attackers can use this information to...
Ruijie Networks Switch eWeb S29_RGOS 11.4 - Local File Inclusion Detection
Ruijie Networks Switch eWeb S29RGOS 11.4 is vulnerable to local file inclusion and allows remote unauthenticated attackers to access locally stored files and retrieve their content via the 'download.do' endpoint. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie Networks Switch eWeb S29RGOS...
CVE-2020-37015
CVE-2020-37015 affects Ruijie Networks Switch eWeb S29_RGOS 11.4. The vulnerability is a directory traversal in the web interface where an unauthenticated user can manipulate the file path on the /download.do endpoint using â../â sequences to retrieve sensitive configuration files that may contai...
CVE-2020-37015 Ruijie Networks Switch eWeb S29_RGOS 11.4 - Directory Traversal
The Ruijie Networks Switch eWeb S29RGOS version 11.4 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by manipulating file path parameters. Attackers can exploit the /download.do endpoint with '../' sequences to retrieve...
CVE-2020-37015: Improper Limitation of a Pathname to a Restricted Directory
The Ruijie Networks Switch eWeb S29RGOS version 11.4 contains a directory traversal vulnerability that allows unauthenticated attackers to access sensitive configuration files by manipulating file path parameters. Attackers can exploit the /download.do endpoint with '../' sequences to retrieve...
CVE-2025-68459
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...
CVE-2025-68459
The CVE-2025-68459 affects Ruijie Networks AP180 series (RG-AP180 indoor wall plate). The vulnerability is an OS command injection via the CLI service, enabling an attacker who can log in to the device to execute arbitrary OS commands. Impact is described as high for confidentiality, integrity, a...
CVE-2025-68459
RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service...
CVE-2025-58778
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
CVE-2025-58778: Hidden Functionality
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
PT-2025-42421
Name of the Vulnerable Software and Affected Versions Ruijie Networks RG-EST300 affected versions not specified Description Multiple versions of RG-EST300 provided by Ruijie Networks include an SSH server function that is not documented in the manual and is enabled by default. Successful...
EUVD-2023-30593
Malicious code in bioql PyPI...
EUVD-2021-30106
Malicious code in bioql PyPI...
EUVD-2021-30107
Malicious code in bioql PyPI...
EUVD-2021-30109
Malicious code in bioql PyPI...
EUVD-2021-30108
Malicious code in bioql PyPI...
EUVD-2021-30110
Malicious code in bioql PyPI...
CVE-2023-26800
Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...
CVE-2023-34644
Remote code execution vulnerability in Ruijie Networks Product: RG-EW series home routers and repeaters EW3.01B11P204, RG-NBS and RG-S1930 series switches SWITCH3.01B11P218, RG-EG series business VPN routers EG3.01B11P216, EAP and RAP series wireless access points AP3.01B11P218, NBC series wirele...
CVE-2021-43162
A Remote Code Execution RCE vulnerability exists in Ruijie Networks Ruijie RG-EW Series Routers up to ReyeeOS 1.55.1915 / EW3.01B11P55 via the runPackDiagnose function in /cgi-bin/luci/api/diagnose...