Lucene search
+L

9 matches found

Kitploit
Kitploit
added 2026/08/25 4:23 a.m.1 views

CVE-2025-54322-exploit

CVE-2025-54322: Pre-Auth RCE-эксплойт для XSpeeder SXZOS Профессиональный Proof-of-Concept PoC эксплойт для CVE-2025-54322 — критической уязвимости удалённого выполнения кода до аутентификации в прошивке XSpeeder SXZOS. Эта уязвимость была обнаружена и раскрыта автономным AI-агентом из pwn.ai. 🔍...

10CVSS5.5AI score0.15482EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/25 4:16 a.m.3 views

CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Сканер RCE без аутентификации Многопоточный сканер уязвимости CVE-2025-54322, неаутентифицированной уязвимости удаленного выполнения кода в прошивке XSpeeder SXZOS, затрагивающей 70 000+ хостов по всему миру. 📋 Содержание Об уязвимости Возможности Установка...

10CVSS5.5AI score0.15482EPSS
SaveExploits2References1
RedhatCVE
RedhatCVE
added 2025/12/29 5:54 a.m.14 views

CVE-2025-54322

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...

10CVSS8.1AI score0.15482EPSS
SaveExploits2References1
NVD
NVD
added 2025/12/27 2:15 p.m.15 views

CVE-2025-54322

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...

10CVSS0.15482EPSS
SaveExploits2References2
OSV
OSV
added 2025/12/27 2:15 p.m.13 views

CVE-2025-54322

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...

9.8CVSS6.4AI score0.15482EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
added 2025/12/27 12:00 a.m.22 views

PT-2025-53622

Name of the Vulnerable Software and Affected Versions XSpeeder SXZOS through 2025-12-26 Description XSpeeder SXZOS through 2025-12-26 contains a critical flaw allowing unauthenticated attackers to achieve root remote code execution. The issue stems from the unsafe evaluation of base64-decoded inp...

10CVSS7.7AI score0.15482EPSS
SaveExploits2References39
Vulnrichment
Vulnrichment
added 2025/12/27 12:00 a.m.9 views

CVE-2025-54322

Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...

10CVSS7.8AI score0.15482EPSS
SaveExploits2References2
CVE
CVE
added 2025/12/27 12:00 a.m.77 views

CVE-2025-54322

XSpeeder SXZOS firmware (CVE-2025-54322) is affected. The vulnerability resides in the Django-based web interface where unsafe use of Python eval() on base64-decoded input from the chkid parameter (along with title and oIP) enables unauthenticated remote code execution with root privileges. Affec...

10CVSS7.8AI score0.15482EPSS
SaveExploits2References2Affected Software1
GithubExploit
GithubExploit
added 2025/12/26 8:54 p.m.382 views

Exploit for CVE-2025-54322

CVE-2025-54322 - XSpeeder SXZOS Pre-Auth RCE Scanner !Licen...

8.7AI score0.15482EPSS
SaveExploits2
Rows per page
Query Builder