CVE-2024-29972

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POCs CVE-2024-29972-EXP CVE-2024-29972 Zyxel NAS Backdoor Account: Unauthorized activation of backdoor account FOFA app="ZyXEL-NAS326" Notes This EXP exploitation script is a combination of...

CVE-2024-29973

CVE-2024-29973 - Remote Command Injection Vulnerability Description CVE-2024-29973 is a critical vulnerability found in certain Zyxel networking devices. This vulnerability allows an unauthenticated attacker to execute arbitrary commands on the target device by exploiting improper input validatio...

Zyxel NAS zylog RCE (CVE-2023-27992)

Exploits CVE-2023-27992 in Zyxel NAS: pre-auth command injection via configuremailsyslog after auth-bypass path /cmd,/ck6fup6/zylogmain/. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NAS zylog pre-auth command injection CVE-2023-27992.""" import re import urllib.parse from kittysploit impor...

Zyxel NAS - Auth Bypass Indicator (CVE-2023-27992 family)

Detects Zyxel NAS authentication bypass via /cmd,/ck6fup6/zylogmain/configuremailsyslog, indicating exposure to the Jun/Nov 2023 vulnerability set including pre-auth command injection CVE-2023-27992 and related issues. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NAS authentication bypass...

EUVD-2019-2434

Malware in sbrugna...

EUVD-2019-2437

Malware in sbrugna...

EUVD-2019-2438

Malware in sbrugna...

EUVD-2019-2435

Malware in sbrugna...

EUVD-2019-2436

Malware in sbrugna...

CVE-2019-10630

A plaintext password vulnerability in the Zyxel NAS 326 through 5.21 allows an elevated privileged user to get the admin password of the device...

CVE-2019-10631

Shell Metacharacter Injection in the package installer on Zyxel NAS 326 version 5.21 and below allows an authenticated attacker to execute arbitrary code via multiple different requests...

CVE-2019-10632

A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other user's files...

CVE-2019-10633

An eval injection vulnerability in the Python web server routing on the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to execute arbitrary code via the tjp6jp6y4, simZysh, and ck6fup6 APIs...

CVE-2019-10634

An XSS vulnerability in the Zyxel NAS 326 version 5.21 and below allows a remote authenticated attacker to inject arbitrary JavaScript or HTML via the user, group, and file-share description fields...

Zyxel NAS Web Console Detection

Binary data zyxelnaswebconsoledetect.nbin...

Mirai-like Botnet Targets Zyxel NAS Devices in Europe for DDoS Attacks

Beware, Zyxel customers, and keep your devices up to date...

Exploit for OS Command Injection in Zyxel Nas326_Firmware

TG Join Us: https://t.me/WanLiChangChengWanLiChang Join us f...

Exploit for OS Command Injection in Zyxel Nas326_Firmware

CVE-2024-29973 PoC and Bulk Scanner Overview This is a pr...

Zyxel NAS Multiple Vulnerabilities

The Zyxel NAS is potentially affected by multiple vulnerabilities. - This command injection vulnerability in the 'setCookie' parameter in Zyxel NAS326 and NAS542 devices could allow an unauthenticated attacker to execute some OS commands by sending a crafted HTTP POST request. CVE-2024-29973 - Th...

Zyxel NAS Pre-Auth Command Injection vulnerability (CVE-2023-27992)

The Zyxel NAS is potentially affected by a pre-authentication command injection vulnerability. This Zyxel device firmware is missing authentication logic which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device. Note that...