The vulnerability of the /sysinit.html file in the microprogramming software for WAVLINK routers, WL-WN578W2, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the /sysinit.html file in the microprogramming software for WAVLINK WL-WN578W2 is related to the lack of a mechanism for recovering passwords when processing the newpass/confpass parameter. Exploiting this vulnerability can allow an attacker, operating remotely, to gain...

EUVD-2025-29067

Malicious code in bioql PyPI...

CVE-2025-10322

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

CVE-2025-10322 Wavlink WL-WN578W2 sysinit.html password recovery

A vulnerability has been found in Wavlink WL-WN578W2 221110. The affected element is an unknown function of the file /sysinit.html. The manipulation of the argument newpass/confpass leads to weak password recovery. The attack is possible to be carried out remotely. The exploit has been disclosed ...

Raisecom Technology GPON-ONU HT803G-07 Command Injection Vulnerability (CNVD-2019-05548)

Raisecom Technology is a supplier of access equipment, solutions and services. A command injection vulnerability exists in the 'newpass' and 'confpass' parameters of /bin/WebMGR in the Raisecom Technology GPON-ONU HT803G-07. An attacker could exploit this vulnerability to execute code...