Lucene search
+L

3129 matches found

Kitploit
Kitploit
added 2026/09/19 9:52 p.m.11 views

CVE-2022-30525_check

CVE-2022-30525check Description: This script checks for the presence of the OS command injection vulnerability CVE-2022-30525 in Zyxel USG FLEX devices running firmware versions 5.00 through 5.21 Patch 1. The vulnerability allows an attacker to modify specific files and execute OS commands on a...

10CVSS8.4AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/19 8:12 p.m.7 views

CVE-2022-30525

CVE-2022-30525 Una vulnerabilidad de inyección de comandos del sistema operativo en el programa CGI de Zyxel Resumen ejecutivo La vulnerabilidad, descubierta por primera vez el 13 de abril de 2022, causó ejecución remota de código en los productos de firewall de Zyxel. Esta importante...

10CVSS8.8AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/19 4:58 p.m.12 views

vulns

vulnerability reports HN Security's advisories. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Multiple vulnerabilities in Solaris dtprintinfo and libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Multiple vulnerabilities in Zyxel zysh...

10CVSS7.4AI score0.05673EPSS
SaveExploits28References10
Kitploit
Kitploit
added 2026/09/19 4:18 p.m.5 views

zyxel-cve-2021-35036-super-admin-password-leak

CVE-2021-35036: Análisis de Filtración de Contraseña de Super-Admin de Zyxel Este repositorio contiene el informe público y los archivos de laboratorio para CVE-2021-35036. El problema fue reportado contra el firmware Zyxel VMG3625-T50B y se centró en las rutas getter de DAL que devolvían...

6.5CVSS5.8AI score0.0049EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/19 3:03 p.m.6 views

CVE-2022-30525

CVE-2022-30525 Vulnerabilidad de inyección de comandos remotos no autenticada en el firewall Zyxel Componentes afectados USG FLEX 100, 100W, 200, 500, 700 USG20-VPN, USG20W-VPN ATP 100, 200, 500, 700, 800 Versiones de firmware ZLD5.00 thru ZLD5.21 Patch 1 ZLD5.10 thru ZLD5.21 Patch 1 ZLD5.10 thru...

10CVSS8.8AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/19 2:01 p.m.8 views

victorian_machinery

Maquinaria Victoriana Maquinaria Victoriana es una prueba de concepto de exploit para CVE-2022-30525. La vulnerabilidad es una inyección de comandos remota no autenticada que afecta a los firewalls de Zyxel que soportan aprovisionamiento zero touch. Zyxel lanzó una corrección para este problema e...

10CVSS8.7AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/19 7:27 a.m.10 views

CVE-2022-30525

CVE-2022-30525 Zyxel Firewall Command Injection Vulnerability CVE-2022-30525 POC&EXP author:160team.west9B For use only by authorized security researchers. Comply with cybersecurity laws. Any issues arising are your own responsibility, and the author bears no liability. 01-Introduction On May 12,...

10CVSS8.8AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/19 4:32 a.m.8 views

CVE-2024-29973

CVE-2024-29973 - Remote Command Injection Vulnerability Description CVE-2024-29973 is a critical vulnerability found in certain Zyxel networking devices. This vulnerability allows an unauthenticated attacker to execute arbitrary commands on the target device by exploiting improper input validatio...

9.8CVSS8.9AI score0.86089EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/19 3:54 a.m.8 views

CVE-2024-29973

CVE-2024-29973 PoC y escáner masivo Resumen Este es un proof-of-concept PoC y escáner masivo para CVE-2024-29973: vulnerabilidad de inyección de comandos en las versiones de firmware Zyxel NAS326 anteriores a V5.21AAZF.17C0 y NAS542 anteriores a V5.21ABAG.14. Versión 1.0.2 root@kitploit: - Se...

9.8CVSS8.5AI score0.86089EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/19 3:54 a.m.14 views

vulns

rapports de vulnérabilités Avis de sécurité de HN Security. https://hnsecurity.it/ Solaris HNS-2022-01-dtprintinfo. Plusieurs vulnérabilités dans Solaris dtprintinfo et libXm/libXpm CVE-2022-46285, CVE-2023-24039, CVE-2023-24040. Zyxel HNS-2022-02-zyxel-zysh. Plusieurs vulnérabilités dans Zyxel...

10CVSS7.2AI score0.05673EPSS
SaveExploits28References10
Kitploit
Kitploit
added 2026/09/19 3:52 a.m.9 views

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel Firewall Remote Command Injection A python based exploit for CVE-2022-30525 Vulnerability Summary NIST An OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100W firmware versions 5.00 up to and including 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 ...

10CVSS8.2AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/19 2:41 a.m.5 views

CVE-2024-29972

TG Join Us https://t.me/WanLiChangChengWanLiChang Join us to regularly receive various vulnerability EXP POCs CVE-2024-29972-EXP CVE-2024-29972 Zyxel NAS Backdoor Account: Unauthorized activation of backdoor account FOFA app="ZyXEL-NAS326" Notes This EXP exploitation script is a combination of...

9.8CVSS8.4AI score0.89326EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/19 2:07 a.m.7 views

cve-2022-30525

CVE-2022-30525 par 1vere$k Rapid7 a découvert et signalé une vulnérabilité affectant les pare-feux Zyxel prenant en charge le Zero Touch Provisioning ZTP, ce qui inclut les séries ATP, VPN et USG FLEX y compris les USG20-VPN et USG20W-VPN. La vulnérabilité, identifiée sous le nom CVE-2022-30525,...

10CVSS9.2AI score0.99944EPSS
SaveExploits27
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.56 views

Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting

Zyxel ZyWall, USG, and UAG devices allow remote attackers to inject arbitrary web script or HTML via the errmsg parameter freetimefailed.cgi CGI program, aka reflective cross-site scripting. id: CVE-2019-12581 info: name: Zyxel ZyWal/USG/UAG Devices - Cross-Site Scripting author: n-thumann...

6.1CVSS6.2AI score0.064EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.90 views

Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass

Zyxel NBG2105 V1.00AAGU.2C0 devices are susceptible to authentication bypass vulnerabilities because setting the login cookie to 1 provides administrator access. id: CVE-2021-3297 info: name: Zyxel NBG2105 V1.00AAGU.2C0 - Authentication Bypass author: gy741 severity: high description: Zyxel NBG21...

7.8CVSS7.3AI score0.20514EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.119 views

Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting

ZyXEL ZyWALL 2 Plus Internet Security Appliance contains a cross-site scripting vulnerability. Insecure URI handling leads to bypass of security restrictions, which allows an attacker to execute arbitrary JavaScript codes to perform multiple attacks. id: CVE-2021-46387 info: name: Zyxel ZyWALL 2...

6.1CVSS6.5AI score0.20955EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.48 views

Zyxel - Cross-Site Scripting

Zyxel ATP200, ATP500, ATP800, USG20-VPN, USG20W-VPN, USG40, USG40W, USG60, USG60W, USG110, USG210, USG310, USG1100, USG1900, USG2200-VPN, ZyWALL 110, ZyWALL 310, and ZyWALL 1100 devices contain a reflected cross-site scripting vulnerability on the security firewall login page via the mpidx...

6.1CVSS6.1AI score0.2118EPSS
SaveExploits4References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.192 views

ZyXel USG - Hardcoded Credentials

A hardcoded credential vulnerability was identified in the 'zyfwp' user account in some Zyxel firewalls and AP controllers. The account was designed to deliver automatic firmware updates to connected access points through FTP. id: CVE-2020-29583 info: name: ZyXel USG - Hardcoded Credentials autho...

10CVSS8.3AI score0.90155EPSS
SaveExploits2References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.61 views

Zyxel ZyWall UAG/USG - Account Creation Access

Zyxel UAG, USG, and ZyWall devices allows a remote attacker to generate guest accounts by directly accessing the account generator via the "Free Time" component. This can lead to unauthorized network access or DoS attacks. id: CVE-2019-12583 info: name: Zyxel ZyWall UAG/USG - Account Creation...

9.1CVSS8.2AI score0.43926EPSS
SaveExploits1References5
Nuclei
Nuclei
added 2026/09/19 2:05 a.m.73 views

Zyxel VMG1312-B10D 5.13AAXA.8 - Local File Inclusion

Zyxel VMG1312-B10D 5.13AAXA.8 is susceptible to local file inclusion. A remote unauthenticated attacker can send a specially crafted URL request containing "dot dot" sequences /../, conduct directory traversal attacks, and view arbitrary files. id: CVE-2018-19326 info: name: Zyxel VMG1312-B10D...

7.5CVSS7.1AI score0.09759EPSS
SaveExploits1References5
Rows per page
Query Builder