Lucene search
+L

793 matches found

CNNVD
CNNVD
•added 2026/04/30 12:00 a.m.•26 views

U-SPEED N300 资源管理错误漏洞

The U-SPEED N300 is a wireless router device produced by the U-SPEED company. The U-SPEED N300 V1.0.0 version has a resource management vulnerability. This vulnerability stems from a denial-of-service attack on the embedded Boa HTTP server. It is possible for attackers to exhaust system resources...

7.5CVSS5.8AI score0.00492EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2026/04/30 12:00 a.m.•61 views

CVE-2026-36958

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the...

0.00492EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2026/04/30 12:00 a.m.•15 views

CVE-2026-36957

Dbit N300 T1 Pro Easy Setup Wireless Wi-Fi Router V1.0.0 is vulnerable to Denial of Service via the boa web server URI handler. By initiating a high-volume flood of HTTP GET requests to non-existent URIs, an attacker can exhaust critical system resources, including file descriptors and memory...

7.5CVSS5.4AI score0.00492EPSS
SaveExploits2References3
EUVD
EUVD
•added 2026/04/30 12:00 a.m.•24 views

EUVD-2026-26379

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the...

7.5CVSS5.4AI score0.00492EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2026/04/30 12:00 a.m.•30 views

Dbit N300 T1 Pro 资源管理错误漏洞

The Dbit N300 T1 Pro is a wireless router device produced by the Dbit company. The Dbit N300 T1 Pro V1.0.0 version has a resource management vulnerability. This vulnerability stems from a denial-of-service attack in the boa Web server URI handler, which could allow attackers to exhaust system...

7.5CVSS5.8AI score0.00492EPSS
SaveExploits2References1
CVE
CVE
•added 2026/04/30 12:00 a.m.•70 views

CVE-2026-36958

The U-SPEED N300 V1.0.0 wireless router is vulnerable to a Denial-of-Service (DoS) attack due to uncontrolled resource consumption (CWE-400) in its embedded Boa HTTP server . An attacker can exhaust system resources by sending a large volume of concurrent HTTP requests to random or non-existent e...

7.5CVSS5.8AI score0.00492EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/30 12:00 a.m.•13 views

CVE-2026-36958: Uncontrolled Resource Consumption

A denial-of-service vulnerability exists in the U-SPEED N300 V1.0.0 wireless router. By sending a large number of concurrent HTTP requests to random or non-existent endpoints on the web management interface, an attacker can exhaust system resources in the embedded Boa HTTP server. This causes the...

7.5CVSS5.8AI score0.00492EPSS
SaveExploits2References3
GithubExploit
GithubExploit
•added 2026/04/29 8:33 p.m.•104 views

Exploit for CVE-2026-36958

CVE-2026-36958: Denial of Service via Concurrent HTTP Requests...

5.5AI score0.00492EPSS
SaveExploits2
GithubExploit
GithubExploit
•added 2026/04/29 8:33 p.m.•141 views

Exploit for CVE-2026-36957

CVE-2026-36957: Denial of Service via HTTP Flood on Boa Web Se...

5.5AI score0.00492EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2026/04/27 7:23 p.m.•19 views

CVE-2026-6988

A flaw has been found in Tenda HG10 HG7HG9HG10re300001138enxpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit h...

9CVSS8.2AI score0.01009EPSS
SaveExploits1References1
NVD
NVD
•added 2026/04/25 6:16 p.m.•20 views

CVE-2026-6988

A flaw has been found in Tenda HG10 HG7HG9HG10re300001138enxpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit h...

9CVSS0.01009EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/04/25 5:00 p.m.•53 views

CVE-2026-6988 Tenda HG10 Boa Service formRouting formRoute buffer overflow

A flaw has been found in Tenda HG10 HG7HG9HG10re300001138enxpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit h...

9CVSS0.01009EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/04/25 5:00 p.m.•6 views

CVE-2026-6988 Tenda HG10 Boa Service formRouting formRoute buffer overflow

A flaw has been found in Tenda HG10 HG7HG9HG10re300001138enxpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit h...

9CVSS8.2AI score0.01009EPSS
SaveExploits1References5
EUVD
EUVD
•added 2026/04/25 5:00 p.m.•18 views

EUVD-2026-25664

A flaw has been found in Tenda HG10 HG7HG9HG10re300001138enxpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit h...

9CVSS8.5AI score0.01009EPSS
SaveExploits1References5
CVE
CVE
•added 2026/04/25 5:00 p.m.•40 views

CVE-2026-6988

The CVE-2026-6988 entry concerns Tenda HG10 devices (Boa Service) where the formRoute function in /boaform/formRouting is vulnerable to a buffer overflow caused by manipulating the nextHop argument. The flaw allows remote initiation of an attack, and the description notes that an exploit has been...

9CVSS8.2AI score0.01009EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2026/04/25 12:00 a.m.•22 views

Tenda HG10 缓冲区错误漏洞

The Tenda HG10 is a Wi-Fi router produced by the Chinese company Tenda. The Tenda HG10 has a buffer overflow vulnerability, which stems from improper handling of the nextHop parameter in the formRoute function within the Boa Service component. This improper handling can lead to a buffer overflow...

9CVSS7.8AI score0.01009EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/04/25 12:00 a.m.•23 views

PT-2026-35159

A flaw has been found in Tenda HG10 HG7 HG9 HG10re 300001138 en xpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The...

9CVSS8.2AI score0.01009EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/25 12:00 a.m.•3 views

CVE-2026-6988: Buffer Copy without Checking Size of Input

A flaw has been found in Tenda HG10 HG7HG9HG10re300001138enxpon. This issue affects the function formRoute of the file /boaform/formRouting of the component Boa Service. This manipulation of the argument nextHop causes buffer overflow. It is possible to initiate the attack remotely. The exploit h...

9CVSS8.2AI score0.01009EPSS
SaveExploits1References6
BDU FSTEC
BDU FSTEC
•added 2026/04/01 12:00 a.m.•23 views

boa formSchedule Code Execution

The vulnerability of the formSchedule function in the /goform/formSchedule file of the boa microprogramming system for D-Link DIR-619L routers is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

9CVSS7.8AI score0.00876EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
•added 2026/03/26 2:58 p.m.•19 views

CVE-2026-4188

A security flaw has been discovered in D-Link DIR-619L 2.06B01. The affected element is the function formSchedule of the file /goform/formSchedule of the component boa. Performing a manipulation of the argument curTime results in stack-based buffer overflow. The attack may be initiated remotely...

9CVSS7.9AI score0.00876EPSS
SaveExploits0References1
Rows per page
Query Builder