tenda-hg10-rce

CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...

CVE-2026-85109

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2026-85109 Tenda HG10 Boa Web Server formLogin buffer overflow

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2026-85109

CVE-2026-85109 affects the Boa Web Server component of the Tenda HG10 (firmware 300001138). The vulnerability resides in the formLogin function within the file /boaform/formLogin. By manipulating the Username argument, an attacker can trigger a buffer overflow . The attack is remote and requires ...

EUVD-2026-70468

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2026-85109 Tenda HG10 Boa Web Server formLogin buffer overflow

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2026-85109: Buffer Copy without Checking Size of Input

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

PT-2026-85028

Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 affected versions not specified Description A buffer overflow can be triggered remotely within the Boa Web Server component. The issue exists in the formLogin function located in the /boaform/formLogin file when the Userna...

Siemens SIMATIC - Default Password Auth Bypass Detection (CVE-2011-4508)

Detects CVE-2011-4508/4509 by POSTing Login=Administrator&Password=100 to FormLogin. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2011-4508/4509 by POSTing Login=Administrator&Password=100 to FormLogin.""" import re from kittysploit import from lib.protocols.http.httpclient import...

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

EUVD-2025-208291

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

CVE-2025-70231: Improper Limitation of a Pathname to a Restricted Directory

D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode but fails to filter the value of the FILECODE parameter, resulting in a path traversal vulnerability...

CVE-2025-70222

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

CVE-2025-70222

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

CVE-2025-70222: Stack-based Buffer Overflow

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

D-Link DIR-513 security vulnerabilities

The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formLogin function...

CVE-2025-70221: Stack-based Buffer Overflow

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

CVE-2025-70221

The D-Link DIR-513 wireless router, running firmware version v1.10 , is vulnerable to a stack buffer overflow vulnerability. The flaw is triggered via the curTime parameter within the goform/formLogin function. This vulnerability can lead to a critical impact on confidentiality, integrity, and av...