61 matches found
tenda-hg10-rce
CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...
CVE-2026-85109
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2026-85109 Tenda HG10 Boa Web Server formLogin buffer overflow
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
EUVD-2026-70468
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2026-85109
CVE-2026-85109 affects the Boa Web Server component of the Tenda HG10 (firmware 300001138). The vulnerability resides in the formLogin function within the file /boaform/formLogin. By manipulating the Username argument, an attacker can trigger a buffer overflow . The attack is remote and requires ...
CVE-2026-85109 Tenda HG10 Boa Web Server formLogin buffer overflow
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
PT-2026-85028
Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 affected versions not specified Description A buffer overflow can be triggered remotely within the Boa Web Server component. The issue exists in the formLogin function located in the /boaform/formLogin file when the Userna...
CVE-2026-85109: Buffer Copy without Checking Size of Input
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
EUVD-2025-208291
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70231: Improper Limitation of a Pathname to a Restricted Directory
D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode but fails to filter the value of the FILECODE parameter, resulting in a path traversal vulnerability...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
CVE-2025-70221
The D-Link DIR-513 wireless router, running firmware version v1.10 , is vulnerable to a stack buffer overflow vulnerability. The flaw is triggered via the curTime parameter within the goform/formLogin function. This vulnerability can lead to a critical impact on confidentiality, integrity, and av...
D-Link DIR-513 安全漏洞
The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formLogin function...
PT-2026-23063
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered by providing input to the curTime parameter within the ''/goform/formLogin'' and ''/goform/getAuthCode'' AP...
