58 matches found
CVE-2023-33477
CVE-2023-33477 Harmonic NSG 9000-6G modulator has an unauthorized download vulnerability in the config.exp configuration file Due to the lack of access permission verification for the "cgi.bin/config.exp" file in this model modulator, any user may request to download a configuration file while...
azure-security-auditor
Azure Security Posture Auditor A lightweight, production-style CLI tool that audits Azure security configurations and surfaces common misconfigurations — mirroring what Microsoft Defender for Cloud checks internally. Checks ID| Category| Check| Severity ---|---|---|--- AZ-001| RBAC| Owner /...
Zyxel Firewall Auth Bypass (CVE-2022-0342)
Exploits CVE-2022-0342 in Zyxel USG/ZyWALL/ATP/VPN/NSG: unauthenticated export-cgi downloads startup-config.conf with admin credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel firewall export-cgi auth bypass CVE-2022-0342.""" from kittysploit import from lib.protocols.http.httpclient...
VulnCheck KEV: CVE-2022-0342
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...
EUVD-2018-6823
Malware in sbrugna...
EUVD-2018-6825
Malware in sbrugna...
EUVD-2018-6824
Malware in sbrugna...
EUVD-2023-37640
Malicious code in bioql PyPI...
Malicious code in banana-nsg-project (npm)
The package banana-nsg-project was found to contain malicious code...
MAL-2025-15410 Malicious code in banana-nsg-project (npm)
The package banana-nsg-project was found to contain malicious code...
CVE-2023-33477
In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...
CVE-2020-29299
Certain Zyxel products allow command injection by an admin via an input string to chgexppwd during a password-change action. This affects VPN On-premise before ZLD V4.39 week38, VPN Orchestrator before SD-OS V10.03 week32, USG before ZLD V4.39 week38, USG FLEX before ZLD V4.55 week38, ATP before...
Cisco Adaptive Security Appliance and Firepower Threat Defense Software NSG Access Control List Bypass Vulnerability
A vulnerability in the Network Service Group NSG feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flow...
CVE-2024-20384: Authentication Bypass by Spoofing
A vulnerability in the Network Service Group NSG feature of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to bypass a configured access control list ACL and allow traffic that should be denied to flow...
CVE-2023-33477
In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...
CVE-2023-33477
In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...
Path traversal
In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...
CVE-2023-33477
In Harmonic NSG 9000-6G devices, an authenticated remote user can obtain source code by directly requesting a special path...
Harmonic NSG 9000-6G security vulnerability
The Harmonic NSG 9000-6G is a highly integrated digital video solution from Harmonic. A security vulnerability exists in the Harmonic NSG 9000-6G that originates from a remote user being able to obtain source code by directly requesting a special path...
