CVE-2025-29268

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...

CVE-2025-29269

ALLNET ALL-RUT22GW v3.3.8 was discovered to contain an OS command injection vulnerability via the command parameter in the popen.cgi endpoint...

CVE-2025-29268

The ALLNET ALL-RUT22GW wireless router (version 3.3.8 ) is vulnerable to the use of hardcoded credentials . These credentials are stored within the libicos.so library, which could potentially be exposed to attackers. Remediation requires updating the device to a newer version that no longer conta...

CVE-2025-29269

The ALLNET ALL-RUT22GW wireless router (version v3.3.8 ) is susceptible to an OS command injection vulnerability. The root cause is the incorrect operation of the command parameter within the popen.cgi endpoint, which could allow an attacker to gain unauthorized system access. As a temporary work...

CVE-2025-29268

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...

CVE-2025-29268

ALLNET ALL-RUT22GW v3.3.8 was discovered to store hardcoded credentials in the libicos.so library...

EUVD-2022-37715

Malicious code in bioql PyPI...

CVE-2022-34767

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the https://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly...

CVE-2022-34767

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the https://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly...

Authorization

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the https://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly...

CVE-2022-34767

The CVE-2022-34767 vulnerability affects ALLNET WR0500AC router devices. The issue resides in the wizardpwd.asp page, where the admin password can be accessed and changed without validating the user’s identity, enabling an authorization bypass that can be exploited publicly. Several sources descr...

CVE-2022-34767: Missing Authentication for Critical Function

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the https://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly...