CVE-2023-4169_CVE-2023-3306_CVE-2023-4415

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1. RG-EW1200G backend remote code execution vulnerability CVE-2023-3306 2. CVE-2023-4169 unauthorized arbitrary password modification CVE-2023-4169 3. Ruijie RG-EW1200G login bypass CVE-2023-4415 Attention I developed a tool for local...

AWARE-RG: Abstraction Aware Explanation of Resiliency Graphs for Cyber Physical Systems

Understanding the security posture of cyber physical systems CPS requires reasoning across both information technology IT and operational technology OT. However, a security analyst often holds an incomplete, role-specific view of the underlying system which has most likely resulted from their...

Intelbras RF 1200 / RG 1200 Authentication Bypass

Intelbras RF 1200 firmware 1.2.4 and RG 1200 firmware 2.1.9 contain an authentication bypass vulnerability in the GoAhead web server. An unauthenticated LAN attacker can manipulate the request URI to bypass authentication and access protected endpoints, including downloading the device...

CVE-2026-92398

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

CVE-2026-92397

A vulnerability has been found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this vulnerability is the function ccset of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote...

EUVD-2026-80857

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

CVE-2026-92398 Ruijie RG-EW3000GX user_list_note admin os command injection

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

CVE-2026-92398 Ruijie RG-EW3000GX user_list_note admin os command injection

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

CVE-2026-92398

Ruijie RG-EW3000GX (firmware EW_3.0(1)B11P380) is affected by an OS command injection in the user_list_note module within the file /etc/rg_config/admin. An attacker with admin-level privileges can manipulate the Name argument to inject and execute arbitrary OS commands remotely. The vulnerability...

EUVD-2026-80852

A vulnerability has been found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this vulnerability is the function ccset of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote...

CVE-2026-92397 Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection

A vulnerability has been found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this vulnerability is the function ccset of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote...

CVE-2026-92397

Ruijie RG-EW3000GX (firmware EW_3.0(1)B11P380) is affected by an OS command injection vulnerability in the configChange component, specifically in the cc_set function of the binary unifyframe-sgi.elf . The root cause is the unsanitized data.url argument, which allows a remote authenticated attack...

CVE-2026-92397 Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection

A vulnerability has been found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this vulnerability is the function ccset of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote...

PT-2026-93855

A vulnerability was found in Ruijie RG-EW3000GX EW 3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rg config/admin of the component user list note Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate...

PT-2026-93827

A vulnerability has been found in Ruijie RG-EW3000GX EW 3.01B11P380. Affected by this vulnerability is the function cc set of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remot...

CVE-2026-92397: Improper Neutralization of Special Elements used in an OS Command

A vulnerability has been found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this vulnerability is the function ccset of the file unifyframe-sgi.elf of the component configChange. Such manipulation of the argument data.url leads to os command injection. The attack may be performed from remote...

CVE-2026-92398: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Ruijie RG-EW3000GX EW3.01B11P380. Affected by this issue is some unknown functionality of the file /etc/rgconfig/admin of the component userlistnote Module. Performing a manipulation of the argument Name results in os command injection. It is possible to initiate the...

Malicious code in @zalastax/nolb-react-rg (npm)

The package @zalastax/nolb-react-rg was found to contain malicious code. --- Credit: OpenSSF source...

MINI-V3VM-4RG2-VPRV

Bulletin has no description...

Ruijie RG-UAC Login Panel - Detect

Ruijie RG-UAC login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Ruijie RG-UAC login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Ruijie RG-UAC Login Panel - Detect',...