212 matches found
scan_CVE-2020-29583
Scanner for Zyxel products which are vulnerable due to an undocumented user account CVE-2020-29583 Vuln details: https://www.eyecontrol.nl/blog/undocumented-user-account-in-zyxel-products.html But I'm not sure if it's really possible to login with zyfwp via the web interface? Any reports would be...
Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting
ZyXEL ZyWALL 2 Plus Internet Security Appliance contains a cross-site scripting vulnerability. Insecure URI handling leads to bypass of security restrictions, which allows an attacker to execute arbitrary JavaScript codes to perform multiple attacks. id: CVE-2021-46387 info: name: Zyxel ZyWALL 2...
Zyxel ZyWall UAG/USG - Account Creation Access
Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator via the "Free Time" component. This can lead to unauthorized network access or DoS attacks. id: CVE-2019-12583 info: name: Zyxel ZyWall UAG/USG - Account Creation...
Zyxel Firewall Auth Bypass (CVE-2022-0342)
Exploits CVE-2022-0342 in Zyxel USG/ZyWALL/ATP/VPN/NSG: unauthenticated export-cgi downloads startup-config.conf with admin credentials. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel firewall export-cgi auth bypass CVE-2022-0342.""" from kittysploit import from lib.protocols.http.httpclient...
Zyxel ZyWALL USG Extract Hashes
Exploit implementation for ZyWall USG 20 Authentication Bypass In Configuration Import/Export. If the tharget is vulnerable it allows to download configuration files which contains sensitive data like password hashes, firewall rules and other network related configurations. !/usr/bin/env python3 ...
ZyXEL ZyWALL USG - Login Panel Detection
ZyXEL ZyWALL USG firewall login panel detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZyXEL ZyWALL USG firewall login panel detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'ZyXEL ZyWALL USG - Login...
ZyWALL FTP Service - Detect
ZyWALL FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """ZyWALL FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'ZyWALL FTP Service -...
Zyxel ZyWall UAG/USG - Account Creation Access Detection
Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator via the "Free Time" component. This can lead to unauthorized network access or DoS attacks. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel UAG, USG, and ZyWall...
Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting Detection
Zyxel ZyWall, USG, and UAG devices allow remote attackers to inject arbitrary web script or HTML via the errmsg parameter freetimefailed.cgi CGI program, aka reflective cross-site scripting. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel ZyWall, USG, and UAG devices allow remote attackers to...
Zyxel - Cross-Site Scripting Detection
Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 devices contain a reflected cross-site scripting vulnerability on the security firewall login page via the mpidx...
Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting Detection
ZyXEL ZyWALL 2 Plus Internet Security Appliance contains a cross-site scripting vulnerability. Insecure URI handling leads to bypass of security restrictions, which allows an attacker to execute arbitrary JavaScript codes to perform multiple attacks. !/usr/bin/env python3 -- coding: utf-8 --...
Zyxel - Authentication Bypass Detection
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...
VulnCheck KEV: CVE-2022-0342
An authentication bypass vulnerability in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.20 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.32 through 5.20, VPN series firmware versions 4.30 through 5.20, and NSG series firmware...
EUVD-2002-0435
Malware in sbrugna...
EUVD-2004-1783
Malware in sbrugna...
EUVD-2007-4302
Malware in sbrugna...
EUVD-2017-8710
Malware in sbrugna...
EUVD-2007-4299
Malware in sbrugna...