CVE-2022-30525

CVE-2022-30525 Удаленная команда внедрения без аутентификации в брандмауэре Zyxel Затронутые компоненты USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Версии прошивки ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch help...

CVE-2022-30525

CVE-2022-30525 Неаутентифицированное удаленное внедрение команд в брандмауэрах Zyxel Затронутые версии Затронутые компоненты USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Версии прошивки ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru...

CVE-2025-12673

Flex QR Code Generator ' shell.php curl -X POST "https://victimsite.com/wp-admin/admin-ajax.php" \ -F "action=flexqrupdateqr" \ -F "qrId=1" \ -F "qrData="data":"https://example.com"" \ -F "[email protected]" Подробности Уязвимость существует в методе updateqrcode класса...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check 안전 및 비안전 취약점/검증 점검: '안전 점검'으로 검증되지 않은 경우에만 '비안전 점검'을 사용합니다 $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot 비안전 취약점/검증 점검: $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080...

CVE-2011-2461_Magento_Patch

CVE-2011-2461MagentoPatch Автор: Edmonds Commerce Эта CVE связана с CSRF-уязвимостью в файлах Adobe Flex .swf, используемых Magento. Дополнительную информацию об этой CVE можно найти здесь: Peter O'Callaghan - CSRF-уязвимость Magento через Adobe Flex Minded Security - Старое снова ново...

CVE-2022-30525_check

CVE-2022-30525check Описание: Данный скрипт проверяет наличие уязвимости внедрения команд ОС CVE-2022-30525 в устройствах Zyxel USG FLEX под управлением версий прошивки с 5.00 по 5.21 Patch 1. Уязвимость позволяет злоумышленнику изменять определённые файлы и выполнять команды ОС на уязвимом...

CVE-2022-1077

CVE-2022-1077 설명 TEM FLEX-1080 및 FLEX-1085 1.6.0에서 취약점이 발견되었습니다. 문제가 있는 것으로 선언되었습니다. 이 취약점은 Log Handler 구성 요소의 log.cgi에 영향을 미칩니다. 직접 요청을 통해 하드웨어 정보가 유출될 수 있습니다. 공격은 원격으로 시작될 수 있으며 어떤 형태의 인증도 필요하지 않습니다. 사용법 root@kitploit: $ git clone https://github.com/Brosck/CVE-2022-1077.git $ cd CVE-2022-1077 $...

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Remote Command Injection Python-эксплойт для CVE-2022-30525 Сводка об уязвимости NIST Уязвимость внедрения OS-команд в CGI-программе Zyxel USG FLEX 100W с версиями прошивки от 5.00 до 5.21 Patch 1 включительно, USG FLEX 200 с версиями прошивки от 5.00 до 5.21 Patch 1...

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST An OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 ...

lightbulb-framework

LightBulb LightBulb is an open source python framework for auditing web application firewalls and filters. Synopsis The framework consists of two main algorithms: GOFA : An active learning algorithm that infers symbolic representations of automata in the standard membership/equivalence query mode...

EUVD-2026-65205

Grav Flex Objects plugin versions 1.4.0 through 1.4.7 contain an authorization bypass vulnerability in the flex-objects shortcode that allows users with page-edit access to render any registered Flex collection without permission checks. Attackers can place the shortcode in published pages to...

CVE-2026-56707

Grav Flex Objects plugin (versions 1.4.0 through 1.4.7 ) contains an authorization bypass in the flex-objects shortcode. Any user with page-edit access can embed the shortcode in a published page to render any registered Flex collection without the permission checks enforced in the admin panel's ...

CVE-2025-10041

CVE-2025-10041 Flex QR Code Generator = 1.2.5 - Неаутентифицированная произвольная загрузка файлов 🚨 Flex QR Code Generator ≤ 1.2.5 - Неаутентифицированная произвольная загрузка файлов 📝 Описание Плагин Flex QR Code Generator для WordPress уязвим к произвольной загрузке файлов из-за отсутствия...

magento-swf-patched-CVE-2011-2461

magento-swf-patched-CVE-2011-2461 Исправленная версия uploader.swf и uploaderSingle.swf для устранения CVE-2011-2461 Дополнительная информация об уязвимых .swf-файлах в ядре Magento доступна здесь — https://packetstormsecurity.com/files/131376/Magento-eCommerce-Vulnerable-Adobe-Flex-SDK.html...

raptor

Raptor is a web-based web-serivce + UI github centric source-vulnerability scanner i.e. it scans a repository with just the github repo url. You can setup webhooks to ensure automated scans every-time you commit or merge a pull request. The scan is done asynchonously and the results are available...

EUVD-2026-62537

Grav Flex Objects Plugin allows you to build custom collections of objects. Prior to 1.4.3, the Grav Flex Objects Admin Next API requireFlexPermission method in classes/Api/FlexApiController.php returns without denying access when a directory blueprint omits config.admin.permissions. An...

CVE-2026-62670 Fail-open authorization in grav-plugin-flex-objects admin-next API: api.access user gets full CRUD on permission-less directories (requireFlexPermission missing else-deny)

Grav Flex Objects Plugin allows you to build custom collections of objects. Prior to 1.4.3, the Grav Flex Objects Admin Next API requireFlexPermission method in classes/Api/FlexApiController.php returns without denying access when a directory blueprint omits config.admin.permissions. An...

CVE-2026-62670 Fail-open authorization in grav-plugin-flex-objects admin-next API: api.access user gets full CRUD on permission-less directories (requireFlexPermission missing else-deny)

Grav Flex Objects Plugin allows you to build custom collections of objects. Prior to 1.4.3, the Grav Flex Objects Admin Next API requireFlexPermission method in classes/Api/FlexApiController.php returns without denying access when a directory blueprint omits config.admin.permissions. An...

CVE-2026-62670

CVE-2026-62670 is a fail-open authorization flaw in the Grav Flex Objects Plugin (by Trilby Media) prior to version 1.4.3 . The requireFlexPermission() method in classes/Api/FlexApiController.php (Admin Next API) returns without denying access when a directory blueprint omits config.admin.permiss...

PT-2026-72489

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc3-control: Fix TOCTOU in bytes put and bytes get In sof ipc3 bytes put, the size used for the memcpy is derived from the old data-size already in the buffer, not the incoming new data's size field. If the new data h...