CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel 防火墙远程命令注入 基于 Python 的 CVE-2022-30525 漏洞利用工具 漏洞摘要 NIST Zyxel USG FLEX 100W 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 200 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 500 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 700 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 50W 固件版本 5.10 到并包括 5.21 Patch 1、USG20W-VPN...

cve-2022-30525

CVE-2022-30525 作者 1vere$k Rapid7 发现并报告了一个影响支持零触摸配置（ZTP）的 Zyxel 防火墙的漏洞，涉及的型号包括 ATP 系列、VPN 系列以及 USG FLEX 系列（包括 USG20-VPN 和 USG20W-VPN）。该漏洞被标识为 CVE-2022-30525，允许未经认证的远程攻击者在受影响设备上以 nobody 用户身份实现任意代码执行。 下表列出了受影响的型号和固件版本。 Affected Model USG FLEX 100, 100W, 200, 500, 700 ZLD5.00 thru ZLD5.21 Patch 1...

CVE-2022-30525

CVE-2022-30525（Zyxel防火墙远程命令注入） 一个基于Python的CVE-2022-30525漏洞利用工具 漏洞摘要（NIST） Zyxel USG FLEX 100W 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 200 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 500 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 700 固件版本 5.00 至 5.21 Patch 1（含）、USG FLEX 50W 固件版本 5.10 至 5.21 Patch 1（含）、USG20W-VPN...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check 安全与不安全的漏洞/验证检查： （仅在未通过“安全检查”验证时，才会使用“不安全检查”） $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot 不安全的漏洞/验证检查： $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --reboot 启动并连接 SS...

CVE-2026-14818

CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...

CVE-2025-9133

Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...

EUVD-2025-35120

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

PT-2025-42828

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...

VulnCheck KEV: CVE-2022-0342

An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...

The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.

The vulnerability of the microprogrammed network device ZyXEL USG FLEX H is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

EUVD-2021-21676

Malware in sbrugna...

EUVD-2023-27015

Malicious code in bioql PyPI...

EUVD-2023-27017

Malicious code in bioql PyPI...

EUVD-2025-12140

Malicious code in bioql PyPI...

EUVD-2023-58231

Malicious code in bioql PyPI...

EUVD-2023-38241

Malicious code in bioql PyPI...

EUVD-2023-27016

Malicious code in bioql PyPI...