10 matches found
CVE-2025-54322
CVE-2025-54322 - Escáner de RCE Pre-Auth para XSpeeder SXZOS Un escáner de vulnerabilidades multihilo para CVE-2025-54322, una vulnerabilidad de ejecución remota de código no autenticada en el firmware XSpeeder SXZOS que afecta a más de 70.000 hosts a nivel mundial. 📋 Tabla de Contenidos Acerca d...
CVE-2025-54322-exploit
CVE-2025-54322: Exploit RCE Pre-Autenticación en XSpeeder SXZOS Un exploit profesional de Prueba de Concepto PoC para CVE-2025-54322 , una vulnerabilidad crítica de ejecución remota de código sin autenticación en el firmware XSpeeder SXZOS. Esta vulnerabilidad fue descubierta y divulgada por el...
CVE-2025-54322
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...
CVE-2025-54322
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...
CVE-2025-54322
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...
PT-2025-53622
Name of the Vulnerable Software and Affected Versions XSpeeder SXZOS through 2025-12-26 Description XSpeeder SXZOS through 2025-12-26 contains a critical flaw allowing unauthenticated attackers to achieve root remote code execution. The issue stems from the unsafe evaluation of base64-decoded inp...
CVE-2025-54322
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...
CVE-2025-54322
XSpeeder SXZOS firmware (CVE-2025-54322) is affected. The vulnerability resides in the Django-based web interface where unsafe use of Python eval() on base64-decoded input from the chkid parameter (along with title and oIP) enables unauthenticated remote code execution with root privileges. Affec...
CVE-2025-54322: Improper Neutralization of Directives in Dynamically Evaluated Code
Xspeeder SXZOS through 2025-12-26 allows root remote code execution via base64-encoded Python code in the chkid parameter to vLogin.py. The title and oIP parameters are also used...
