CVE-2025-34033

CVE-2025-34033 affects the Blue Angel Software Suite on embedded Linux devices. The vulnerability is an OS command injection in the webctrl.cgi script through the ping_addr parameter, where input is not properly sanitized before being passed to the system-level ping command. An authenticated atta...

ZyXEL GS1510-16 Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ZyXEL GS1510-16 Password Extractor', 'Description' = %q This module exploits a vulnerability in ZyXEL GS1510-16 routers to extract the admin...

ZyXEL GS1510-16 Password Extractor

This module exploits a vulnerability in ZyXEL GS1510-16 routers to extract the admin password. Due to a lack of authentication on the webctrl.cgi script, unauthenticated attackers can recover the administrator password for these devices. The vulnerable device has reached end of life for support...