CVE-2021-3304

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

CVE-2021-3304

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

CVE-2021-3304: Buffer Copy without Checking Size of Input

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

PT-2021-20025

Name of the Vulnerable Software and Affected Versions Sagemcom F@ST 3686 v2 version 3.495 Description The issue is a buffer overflow that can be triggered by sending a long sessionKey to the "goform/login" URI. This can potentially allow for unauthorized access or code execution. Recommendations...

Sagemcom F@ST3686 Buffer Error Vulnerability

The Sagemcom F@ST3686 is a router from Sagemcom France. A buffer error vulnerability exists in the Sagemcom F@ST 3686 v2 3.495 devices, which originates from a long sessionKey to a goform login URI...

PT-2019-14735

Name of the Vulnerable Software and Affected Versions Embedthis GoAhead version 2.5.0 Description An issue was discovered where certain pages, such as "goform/login" and "config/log off page.htm", create links containing a hostname obtained from an arbitrary HTTP Host header sent by an attacker...

Vonage VDV-23 115 Denial of Service Vulnerability

The Vonage VDV-23 115 is a routing repeater from Vonage USA. A security vulnerability exists in the Vonage VDV-23 115 version 3.2.11-0.9.40. An attacker can exploit this vulnerability to cause a router reboot by sending a loginPassword and/or loginUsername field with a long string to goform/login...

CVE-2017-16902: Improper Restriction of Operations within the Bounds of a Memory Buffer

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

PT-2017-14629

Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 version 3.2.11-0.9.40 Description The issue occurs when a long string of characters is sent in the loginPassword and/or loginUsername field to the "goform/login" endpoint, causing the router to reboot. Recommendations For...

PT-2013-5453

Name of the Vulnerable Software and Affected Versions HOTBOX router software version 2.1.11 Description The issue allows remote attackers to cause a denial of service, resulting in a device crash, by sending crafted HTTP POST data to the "goform/login" endpoint. Recommendations For software versi...

CVE-2013-5220: Improper Input Validation

goform/login on the HOT HOTBOX router with software 2.1.11 allows remote attackers to cause a denial of service device crash via crafted HTTP POST data...

PT-2011-2732

Name of the Vulnerable Software and Affected Versions SMC SMCD3G-CCR aka Comcast Business Gateway versions prior to 1.4.0.49.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the web interface. These vulnerabilities allow remote attackers to hijack the...

CVE-2011-0886: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 allow remote attackers to 1 hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or...