Lucene search
+L

78 matches found

Kitploit
Kitploit
added 2026/09/19 3:52 a.m.8 views

CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel 방화벽 원격 명령 주입 CVE-2022-30525용 파이썬 기반 익스플로잇 취약점 요약 NIST Zyxel USG FLEX 100W 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 200 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 500 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 700 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 50W 펌웨어 버전 5.10 5.21 Patch 1, USG20W-VPN 펌웨어 버전 5....

10CVSS8.2AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/19 2:07 a.m.7 views

cve-2022-30525

CVE-2022-30525 1vere$k 제작 Rapid7 이 Zyxel 방화벽 중 ZTPZero Touch Provisioning를 지원하는 ATP 시리즈, VPN 시리즈, USG FLEX 시리즈USG20-VPN 및 USG20W-VPN 포함에 영향을 미치는 취약점을 발견하고 보고했습니다. CVE-2022-30525로 식별된 이 취약점은 인증되지 않은 원격 공격자가 영향을 받는 장치에서 nobody 사용자로 임의 코드 실행을 달성할 수 있도록 합니다. 다음 표에는 영향을 받는 모델과 펌웨어 버전이 나와 있습니다. Affecte...

10CVSS9.2AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/18 11:25 p.m.11 views

CVE-2022-30525_check

CVE-2022-30525check 설명: 이 스크립트는 펌웨어 버전 5.005.21 Patch 1을 실행하는 Zyxel USG FLEX 장치에서 OS 명령 주입 취약점CVE-2022-30525의 존재 여부를 확인합니다. 이 취약점으로 인해 공격자는 취약한 장치에서 특정 파일을 수정하고 OS 명령을 실행할 수 있습니다. 사용 방법: 시스템에 Python 3이 설치되어 있는지 확인하세요 스크립트를 다운로드하여 로컬 컴퓨터에 저장하세요 명령 프롬프트 또는 터미널 창을 열고 스크립트가 저장된 디렉터리로 이동하세요 다음 명령으로...

10CVSS8.4AI score0.99944EPSS
SaveExploits27
Kitploit
Kitploit
added 2026/09/13 10:50 a.m.8 views

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check 安全および安全でない脆弱性/確認チェック: (「安全なチェック」で確認できない場合のみ「安全でないチェック」を使用します) $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot 安全でない脆弱性/確認チェック: $./CVE-2021-36260.py --rhost 192.168.57.20 --rport...

9.8CVSS8.4AI score0.99869EPSS
SaveExploits24
Kitploit
Kitploit
added 2026/09/13 2:55 a.m.8 views

CVE-2022-30525

CVE-2022-30525 Zyxel 방화벽 원격 명령 주입 CVE-2022-30525용 파이썬 기반 익스플로잇 취약점 요약 NIST Zyxel USG FLEX 100W 펌웨어 버전 5.005.21 Patch 1, USG FLEX 200 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 500 펌웨어 버전 5.005.21 Patch 1, USG FLEX 700 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 50W 펌웨어 버전 5.105.21 Patch 1, USG20W-VPN 펌웨어 버전 5.10...

10CVSS8.5AI score0.99944EPSS
SaveExploits27
CVE
CVE
added 2026/08/04 2:28 a.m.110 views

CVE-2026-14818

CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...

7.2CVSS5.7AI score0.00359EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/21 1:57 a.m.53 views

CVE-2025-9133

Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...

8.1CVSS6.7AI score0.0544EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/21 1:49 a.m.7 views

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS7.2AI score0.01484EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/21 1:49 a.m.26 views

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

7.2CVSS0.01484EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/21 12:00 a.m.29 views

PT-2025-42828

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...

8.1CVSS9.5AI score0.0544EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
added 2025/10/10 12:00 a.m.8 views

The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.

The vulnerability of the microprogrammed network device ZyXEL USG FLEX H is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS5.8AI score0.00943EPSS
SaveExploits2References3Affected Software1
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2023-27015

Malicious code in bioql PyPI...

8.1CVSS8.1AI score0.01291EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.11 views

EUVD-2023-27017

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.01054EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.32 views

EUVD-2025-12140

Malicious code in bioql PyPI...

7.8CVSS6.4AI score0.00943EPSS
SaveExploits2References3
EUVD
EUVD
added 2025/10/03 8:07 p.m.18 views

EUVD-2023-58231

Malicious code in bioql PyPI...

5.5CVSS5.7AI score0.00218EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2023-27016

Malicious code in bioql PyPI...

7.2CVSS7AI score0.01033EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.19 views

EUVD-2023-38241

Malicious code in bioql PyPI...

8.8CVSS8.5AI score0.00759EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.22 views

EUVD-2025-12335

Malicious code in bioql PyPI...

6.7CVSS6.4AI score0.00203EPSS
SaveExploits2References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:52 a.m.9 views

CVE-2023-22914

A path traversal vulnerability in the “accountprint.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS command...

7.2CVSS7.1AI score0.01033EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 4:33 a.m.18 views

CVE-2023-5960

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device...

5.5CVSS6.7AI score0.00218EPSS
SaveExploits0
Rows per page
Query Builder