77 matches found
CVE-2022-30525_check
CVE-2022-30525check 描述： 该脚本用于检查运行固件版本5.00至5.21 Patch 1的Zyxel USG FLEX设备中是否存在操作系统命令注入漏洞CVE-2022-30525。该漏洞允许攻击者在易受攻击的设备上修改特定文件并执行操作系统命令。 使用说明： 确保系统已安装Python 3 下载脚本并保存到本地计算机 打开命令提示符或终端窗口，并导航到脚本保存的目录 使用以下命令运行脚本："python CVE-2022-30525.py -t TARGETURL" 将TARGETURL替换为您要检查的Zyxel USG FLEX设备的URL...
cve-2022-30525
CVE-2022-30525 por 1vere$k Rapid7 descubrió y reportó una vulnerabilidad que afecta a los firewalls de Zyxel compatibles con Zero Touch Provisioning ZTP, incluidas las series ATP, VPN y USG FLEX incluidos USG20-VPN y USG20W-VPN. La vulnerabilidad, identificada como CVE-2022-30525, permite a un...
CVE-2022-30525_Exploit
CVE-2022-30525 Zyxel 防火墙远程命令注入 基于 Python 的 CVE-2022-30525 漏洞利用工具 漏洞摘要 NIST Zyxel USG FLEX 100W 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 200 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 500 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 700 固件版本 5.00 到并包括 5.21 Patch 1、USG FLEX 50W 固件版本 5.10 到并包括 5.21 Patch 1、USG20W-VPN...
CVE-2021-36260
CVE-2021-36260 CVE-2021-36260 ./CVE-2021-36260.py --rhost 192.168.57.20 --rport 8080 --check Comprobación de vulnerabilidad/verificación segura e insegura: solo se usará la 'comprobación insegura' si no se verifica con la 'comprobación segura' $./CVE-2021-36260.py --rhost 192.168.57.20 --rport 80...
CVE-2022-30525
CVE-2022-30525 Zyxel Firewall – Remote-Befehlseinschleusung Ein auf Python basierender Exploit für CVE-2022-30525 Zusammenfassung der Schwachstelle NIST Eine OS-Befehlseinschleusungsschwachstelle im CGI-Programm von Zyxel USG FLEX 100W Firmware-Versionen 5.00 bis einschließlich 5.21 Patch 1, USG...
CVE-2026-14818
CVE-2026-14818 describes a path traversal vulnerability in the CLI command used to execute configuration files on Zyxel devices. Affected firmware ranges include Zyxel ATP series (V4.32–V5.42 Patch 1), USG FLEX series (V4.50–V5.42 Patch 1), USG FLEX 50(W) series (V4.16–V5.42 Patch 1), and USG20(W...
CVE-2025-9133
Summary of CVE-2025-9133 (Zyxel devices) Technical details in the connected PT-2025-42828 entry show a missing authorization flaw in Zyxel ATP series, Zyxel USG FLEX series, and Zyxel USG20(W)-VPN devices. The vulnerability arises from insufficient input validation/logic in the CGI interface, spe...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
CVE-2025-8078
A post-authentication command injection vulnerability in Zyxel ATP series firmware versions from V4.32 through V5.40, USG FLEX series firmware versions from V4.50 through V5.40, USG FLEX 50W series firmware versions from V4.16 through V5.40, and USG20W-VPN series firmware versions from V4.16...
PT-2025-42828
Name of the Vulnerable Software and Affected Versions Zyxel ATP series versions V4.32 through V5.40 Zyxel USG FLEX series versions V4.50 through V5.40 Zyxel USG FLEX 50W series versions V4.16 through V5.40 Zyxel USG20W-VPN series versions V4.16 through V5.40 Description A missing authorization fl...
EUVD-2023-27017
Malicious code in bioql PyPI...
EUVD-2025-12140
Malicious code in bioql PyPI...
EUVD-2023-27015
Malicious code in bioql PyPI...
EUVD-2023-58231
Malicious code in bioql PyPI...
EUVD-2023-27016
Malicious code in bioql PyPI...
EUVD-2023-38241
Malicious code in bioql PyPI...
EUVD-2025-12335
Malicious code in bioql PyPI...
CVE-2023-22914
A path traversal vulnerability in the “accountprint.cgi” CGI program of Zyxel USG FLEX series firmware versions 4.50 through 5.35, and VPN series firmware versions 4.30 through 5.35, which could allow a remote authenticated attacker with administrator privileges to execute unauthorized OS command...
CVE-2023-5960
An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware versions 4.30 through 5.37 could allow an authenticated local attacker to access the system files on an affected device...
Zyxel USG FLEX H Series Firewall 1.20 < 1.32 Privilege Escalation
Firmware version of the Zyxel USG is less than uOS 1.32. This means the Zyxel device is vulnerable to mualtiple privilege escalation vulnerability. The incorrect permission assignment vulnerability in the PostgreSQL commands of certain USG FLEX H series uOS firmware versions could allow an...