754 matches found
PT-2025-50665
Name of the Vulnerable Software and Affected Versions Ruijie RG-EW1200G PRO versions 1.00 through 4.00 Description An issue exists in Ruijie RG-EW1200G PRO that allows attackers to execute arbitrary commands. This is due to an OS Command Injection flaw within the nbr cwmp.lua file located at...
CVE-2025-56107
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submitwifi in file /usr/lib/lua/luci/controller/admin/commonquickconfig.lua...
CVE-2025-56088
The Ruijie RG-BCR RG-BCR860 cloud router is affected by an OS Command Injection vulnerability. The root cause is unvalidated input to the action_service function located in the file /usr/lib/lua/luci/controller/admin/service.lua. An attacker can exploit this by sending a crafted POST request to e...
CVE-2025-56102
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226EW1800GX10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the moduleget in file /usr/local/lua/devsta/networkConnect.lua...
Ruijie RG-BCR600W 安全漏洞
Ruijie RG-BCR600W is a commercial cloud router from China Ruijie Ruijie. A security vulnerability exists in the Ruijie RG-BCR600W, which originates from an unvalidated input to the checkchanges function in the file /usr/lib/lua/luci/controller/admin/common.lua, which could lead to an OS command...
PT-2025-50672
Name of the Vulnerable Software and Affected Versions Ruijie RG-YST AP versions 3.01B11P280YST250F Description An OS Command Injection issue exists in Ruijie RG-YST AP. An attacker can execute arbitrary commands by sending a specially crafted POST request to the /usr/lib/lua/luci/modules/common.l...
CVE-2025-58778
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
CVE-2025-58778
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
EUVD-2025-34713
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
Ruijie RG-EST300 安全漏洞
The Ruijie RG-EST300 is a wireless bridge device from Ruijie, China. A security vulnerability exists in the Ruijie RG-EST300 that stems from the SSH server feature not being documented in the manual and enabled in the initial configuration, which could lead to information disclosure, system...
PT-2025-42421
Name of the Vulnerable Software and Affected Versions Ruijie Networks RG-EST300 affected versions not specified Description Multiple versions of RG-EST300 provided by Ruijie Networks include an SSH server function that is not documented in the manual and is enabled by default. Successful...
CVE-2025-58778: Hidden Functionality
Multiple versions of RG-EST300 provided by Ruijie Networks provide SSH server functionality. It is not documented in the manual, and enabled in the initial configuration. Anyone with the knowledge of the related credentials can log in to the affected device, leading to information disclosure,...
CVE-2023-7304: Improper Neutralization of Special Elements used in an OS Command
Ruijie RG-UAC Application Management Gateway contains a command injection vulnerability via the 'nmcsync.php' interface. An unauthenticated attacker able to reach the affected endpoint can inject shell commands via crafted request data, causing the application to execute arbitrary commands on the...
EUVD-2001-0609
Malware in sbrugna...
EUVD-2020-14395
Malware in sbrugna...
EUVD-2020-14407
Malware in sbrugna...
EUVD-2021-21753
Malware in sbrugna...
EUVD-2020-29857
Malware in sbrugna...