CVE-2022-30525_Exploit

CVE-2022-30525 Zyxel 방화벽 원격 명령 주입 CVE-2022-30525용 파이썬 기반 익스플로잇 취약점 요약 NIST Zyxel USG FLEX 100W 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 200 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 500 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 700 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 50W 펌웨어 버전 5.10 5.21 Patch 1, USG20W-VPN 펌웨어 버전 5....

cve-2022-30525

CVE-2022-30525 1vere$k 제작 Rapid7 이 Zyxel 방화벽 중 ZTPZero Touch Provisioning를 지원하는 ATP 시리즈, VPN 시리즈, USG FLEX 시리즈USG20-VPN 및 USG20W-VPN 포함에 영향을 미치는 취약점을 발견하고 보고했습니다. CVE-2022-30525로 식별된 이 취약점은 인증되지 않은 원격 공격자가 영향을 받는 장치에서 nobody 사용자로 임의 코드 실행을 달성할 수 있도록 합니다. 다음 표에는 영향을 받는 모델과 펌웨어 버전이 나와 있습니다. Affecte...

CVE-2022-30525_check

CVE-2022-30525check 설명: 이 스크립트는 펌웨어 버전 5.005.21 Patch 1을 실행하는 Zyxel USG FLEX 장치에서 OS 명령 주입 취약점CVE-2022-30525의 존재 여부를 확인합니다. 이 취약점으로 인해 공격자는 취약한 장치에서 특정 파일을 수정하고 OS 명령을 실행할 수 있습니다. 사용 방법: 시스템에 Python 3이 설치되어 있는지 확인하세요 스크립트를 다운로드하여 로컬 컴퓨터에 저장하세요 명령 프롬프트 또는 터미널 창을 열고 스크립트가 저장된 디렉터리로 이동하세요 다음 명령으로...

CVE-2021-36260

CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check 安全および安全でない脆弱性/確認チェック: （「安全なチェック」で確認できない場合のみ「安全でないチェック」を使用します） $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check --reboot 安全でない脆弱性/確認チェック: $./CVE-2021-36260.py --rhost 192.168.57.20 --rport...

CVE-2022-30525

CVE-2022-30525 Zyxel 방화벽 원격 명령 주입 CVE-2022-30525용 파이썬 기반 익스플로잇 취약점 요약 NIST Zyxel USG FLEX 100W 펌웨어 버전 5.005.21 Patch 1, USG FLEX 200 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 500 펌웨어 버전 5.005.21 Patch 1, USG FLEX 700 펌웨어 버전 5.00 5.21 Patch 1, USG FLEX 50W 펌웨어 버전 5.105.21 Patch 1, USG20W-VPN 펌웨어 버전 5.10...

CVE-2026-14818

CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...

CVE-2025-9133

Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

CVE-2025-8078

A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...

PT-2025-42828

Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...

The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.

The vulnerability of the microprogrammed network device ZyXEL USG FLEX H is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...

EUVD-2023-27015

Malicious code in bioql PyPI...

EUVD-2023-27017

Malicious code in bioql PyPI...

EUVD-2025-12140

Malicious code in bioql PyPI...

EUVD-2023-58231

Malicious code in bioql PyPI...

EUVD-2023-27016

Malicious code in bioql PyPI...

EUVD-2023-38241

Malicious code in bioql PyPI...

EUVD-2025-12335

Malicious code in bioql PyPI...

CVE-2023-22914

A path traversal vulnerability in the “accountprint.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS command...

CVE-2023-5960

An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device...