no CVE yetRemote Code Execution14 Sept 2026
UANIA OS: Authenticated Remote Code Execution
This exploit allow an attacker to gain authenticated remote code execution on UANIA OS box
- Severity
- High · 8.8
- Language
- Python
/exploits Proof of concept
Exploits.
7 proof-of-concept exploits in Python, covering 6 of the 20 CVEs. Each one is published only after the vendor shipped a fix.
CVE-2025-11730Remote Code Execution05 Feb 2026
ZYXEL ZLD 5.41 Remote Code Execution via DDNS profile command injection.
This exploit allows a remote attacker to achieve remote code execution (RCE) due to improper input sanitization in the DDNS profile configuration command on ZYXEL ATP and USG series devices.
- Severity
- High · 7.2
- Language
- Python
CVE-2025-9133Authentication Bypass21 Oct 2025
ZYXEL ZLD 5.40: 2FA Authentication Bypass
This exploit allow an attacker to bypass 2FA and view device configuration.
- Severity
- High · 8.2
- Language
- Python
CVE-2025-8078Remote Code Execution21 Oct 2025
ZYXEL ZLD 5.40: Remote Code Execution via CLI Command Injection
This exploit allow an attacker to perform RCE remotely due to improper input sanitization of the "web-auth" command.
- Severity
- High · 7.2
- Language
- Python
CVE-2025-1731Remote Code Execution06 Aug 2025
ZYXEL uOS 1.31: Authenticated Remote Code Execution
This exploit allow an attacker to gain remote code execution exploiting a no-auth postgresql service via ssh-tunnel
- Severity
- High · 7.8
- Language
- Python
CVE-2025-1731Privilege Escalation06 Aug 2025
ZYXEL uOS 1.31: WebGUI Privilege Escalation via stealed token
This exploit allow an attacker to perform a WebGUI Privilege Escalation using stealed token via Remote Command Execution as postgres user.
- Severity
- High · 7.8
- Language
- Python
These proof-of-concepts are published for defenders and researchers, after the vendor fix is available. Running them against systems you do not own or have written permission to test is illegal.