78 matches found
CVE-2022-30525_Exploit
CVE-2022-30525 Удаленное выполнение команд на межсетевых экранах Zyxel Эксплойт на Python для CVE-2022-30525 Сводка уязвимости NIST Уязвимость внедрения команд ОС в программе CGI межсетевых экранов Zyxel USG FLEX 100W с версиями прошивки от 5.00 до 5.21 Patch 1 включительно, USG FLEX 200 с версия...
cve-2022-30525
CVE-2022-30525 от 1vere$k Rapid7 обнаружила и сообщила об уязвимости, затрагивающей межсетевые экраны Zyxel с поддержкой Zero Touch Provisioning ZTP, включая серии ATP, VPN и USG FLEX включая USG20-VPN и USG20W-VPN. Данная уязвимость, идентифицированная как CVE-2022-30525, позволяет...
CVE-2022-30525_check
CVE-2022-30525check 설명: 이 스크립트는 펌웨어 버전 5.005.21 Patch 1을 실행하는 Zyxel USG FLEX 장치에서 OS 명령 주입 취약점CVE-2022-30525의 존재 여부를 확인합니다. 이 취약점으로 인해 공격자는 취약한 장치에서 특정 파일을 수정하고 OS 명령을 실행할 수 있습니다. 사용 방법: 시스템에 Python 3이 설치되어 있는지 확인하세요 스크립트를 다운로드하여 로컬 컴퓨터에 저장하세요 명령 프롬프트 또는 터미널 창을 열고 스크립트가 저장된 디렉터리로 이동하세요 다음 명령으로...
CVE-2021-36260
CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Безопасная и небезопасная проверка уязвимости/верификации: будет использоваться 'небезопасная проверка', только если не подтверждена 'безопасной проверкой' $./CVE-2021-36260.py --rhost 192.168.57.20 --rpo...
CVE-2022-30525
CVE-2022-30525 Zyxel Firewall Remote Command Injection Python-эксплойт для CVE-2022-30525 Сводка об уязвимости NIST Уязвимость внедрения OS-команд в CGI-программе Zyxel USG FLEX 100W с версиями прошивки от 5.00 до 5.21 Patch 1 включительно, USG FLEX 200 с версиями прошивки от 5.00 до 5.21 Patch 1...
CVE-2026-14818
CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...
CVE-2025-9133
Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
PT-2025-42828
Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...
The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.
The vulnerability of the microprogrammed network device ZyXEL USG FLEX H is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
EUVD-2023-27015
Malicious code in bioql PyPI...
EUVD-2023-27017
Malicious code in bioql PyPI...
EUVD-2025-12140
Malicious code in bioql PyPI...
EUVD-2023-58231
Malicious code in bioql PyPI...
EUVD-2023-27016
Malicious code in bioql PyPI...
EUVD-2023-38241
Malicious code in bioql PyPI...
EUVD-2025-12335
Malicious code in bioql PyPI...
CVE-2023-22914
A path traversal vulnerability in the “accountprint.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS command...
CVE-2023-5960
An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device...