78 matches found
CVE-2022-30525_Exploit
CVE-2022-30525 Injection de commandes à distance dans le pare-feu Zyxel Un exploit basé sur Python pour CVE-2022-30525 Résumé de la vulnérabilité NIST Une vulnérabilité d'injection de commandes OS dans le programme CGI des versions de firmware Zyxel USG FLEX 100W 5.00 jusqu'à 5.21 Patch 1 inclus,...
cve-2022-30525
CVE-2022-30525 par 1vere$k Rapid7 a découvert et signalé une vulnérabilité affectant les pare-feux Zyxel prenant en charge le Zero Touch Provisioning ZTP, ce qui inclut les séries ATP, VPN et USG FLEX y compris les USG20-VPN et USG20W-VPN. La vulnérabilité, identifiée sous le nom CVE-2022-30525,...
CVE-2022-30525_check
CVE-2022-30525check Description: Ce script vérifie la présence de la vulnérabilité d'injection de commandes système CVE-2022-30525 sur les appareils Zyxel USG FLEX exécutant les versions de firmware 5.00 à 5.21 Patch 1. La vulnérabilité permet à un attaquant de modifier des fichiers spécifiques e...
CVE-2021-36260
CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Безопасная и небезопасная проверка уязвимости/верификации: будет использоваться 'небезопасная проверка', только если не подтверждена 'безопасной проверкой' $./CVE-2021-36260.py --rhost 192.168.57.20 --rpo...
CVE-2022-30525
CVE-2022-30525 Injection de commandes à distance dans le pare-feu Zyxel Un exploit basé sur python pour CVE-2022-30525 Résumé de la vulnérabilité NIST Une vulnérabilité d'injection de commandes OS dans le programme CGI des versions de firmware Zyxel USG FLEX 100W de 5.00 à 5.21 Patch 1 incluse, d...
CVE-2026-14818
CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...
CVE-2025-9133
Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
PT-2025-42828
Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...
The vulnerability of the microprogramming software for ZyXEL USG FLEX H devices arises from the improper assignment of permissions to critical resources, allowing attackers to enhance their privileges.
The vulnerability of the microprogrammed network device ZyXEL USG FLEX H is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow attackers to enhance their privileges...
EUVD-2023-27015
Malicious code in bioql PyPI...
EUVD-2023-27017
Malicious code in bioql PyPI...
EUVD-2025-12140
Malicious code in bioql PyPI...
EUVD-2023-58231
Malicious code in bioql PyPI...
EUVD-2023-27016
Malicious code in bioql PyPI...
EUVD-2023-38241
Malicious code in bioql PyPI...
EUVD-2025-12335
Malicious code in bioql PyPI...
CVE-2023-22914
A path traversal vulnerability in the “accountprint.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS command...
CVE-2023-5960
An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device...