CVE-2024-35106-POC

NEXTU FLETA Wifi6 路由器 DoS，潜在 RCE POC 本文档描述了如何通过 CVE-2024-35106 漏洞在 EZNET FLETA WiFI 路由器上执行漏洞利用。 漏洞信息 CVE ID CVE-2024-35106 产品供应商 NEXTU 产品 FLATA AX1500 Wifi6 路由器 版本 1.0.3 漏洞类型 缓冲区溢出 执行环境 该路由器采用基于 Realtek 芯片组的 MIPS 架构，并且为小端序。 路由器固件版本为 v1.0.3。 该路由器使用嵌入式 Web 服务器 Boa，其最后一个版本发布于 2005 年。不过，该路由器使用 Boa We...

CVE-2026-85110

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2026-85109

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2026-85110

Tenda HG10 (version 300001138) is affected by a buffer overflow in the Boa Web Server component, specifically in the formWlanSetup function at /boaform/formWlanSetup, triggered by manipulating the ssid argument. The vulnerability allows remote exploitation with low privileges and no user interact...

EUVD-2026-70471

A vulnerability was identified in Tenda HG10 300001138. Impacted is the function formWlanSetup of the file /boaform/formWlanSetup of the component Boa Web Server. The manipulation of the argument ssid leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...

EUVD-2026-70468

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2026-85109

CVE-2026-85109 affects the Boa Web Server component of the Tenda HG10 (firmware 300001138). The vulnerability resides in the formLogin function within the file /boaform/formLogin. By manipulating the Username argument, an attacker can trigger a buffer overflow . The attack is remote and requires ...

CVE-2017-9833

CVE-2017-9833 참조: https://www.cvedetails.com/cve/CVE-2017-9833/ Shodan dork: product:"Boa Web Server" 0.94.14rc21 페이로드: /cgi-bin/wapopen/?FILECAMERA=../../etc/shadow PoC:...

CVE-2021-33558

CVE-2021-33558 참고: https://www.cvedetails.com/cve/CVE-2021-33558 Shodan dork: product:"Boa Web Server" 0.94.13 페이로드: root@kitploit: /backup.html /preview.html /js/log.js /log.html /email.html /online-users.html /config.js POC:...

CVE-2024-29671-POC

NEXTU FLETA Wifi6 라우터 RCE 익스플로잇 POC 이 문서는 NEXTU FLATA AX1500 라우터 펌웨어에서 CVE-2024-29671 취약점이 어떻게 악용되었는지 설명합니다. 실행 환경 이 라우터는 Realtek 칩셋을 사용하는 리틀엔디언Little-Endian MIPS 아키텍처 기반입니다. 대상 라우터 펌웨어 버전은 v1.0.2입니다. 이 펌웨어는 2005년에 마지막으로 릴리스된 "boa"라는 임베디드 웹 서버를 포함합니다. 하지만 이 라우터는 boa 웹 서버를 사용하여 라우터 펌웨어를 제어하는 관리자 웹...

boa-cve-2009-4496-analysis

CVE-2009-4496 — 방어적 취약점 분석 개요 이 저장소는 Boa 웹 서버와 관련된 역사적 취약점인 CVE-2009-4496 에 대한 방어적 분석을 문서화합니다. 이 프로젝트의 목표는 다음을 통해 방어적 보안 관점에서 취약점을 검토하는 것입니다: 공개적으로 이용 가능한 정보의 수동적 관찰 취약점 문서 검토 과거 소스 코드의 로컬 검토 취약한 코드와 수정된 코드의 비교 취약점의 기술적 원인 평가 수정 조치 분석 사용 가능한 증거의 한계 평가 제3자 시스템에 대한 능동적 테스트, 악용, 인증 시도, 스캐닝 또는 수정은 수행...

CVE-2026-36957

CVE-2026-36957: Boa 웹 서버의 HTTP 플러드Flood를 통한 서비스 거부Denial of Service CVE ID: CVE-2026-36957 날짜: 2026-04-29 발견자: Kirubel Solomne 공급업체: Shenzhen Dibit Network Equipment Co., Ltd. 제품: Dbit Router 펌웨어 버전: V1.0.0 CWE: CWE-400 - 통제되지 않은 리소스 소비Uncontrolled Resource Consumption 설명 Dbit Router 펌웨어 V1.0.0은...

boa-detector

boa-detector 이 Zeek 패키지는 HTTP 헤더에서 Boa 웹 서버 문자열을 탐지합니다. 모든 Boa 버전은 취약한 것으로 간주됩니다: https://www.microsoft.com/en-us/security/blog/2022/11/22/vulnerable-sdk-components-lead-to-supply-chain-risks-in-iot-and-ot-environments/ /^Boa/./ 서버 문자열이 관찰되면 이 패키지는 연결의 c$id$resph에 대해...

CVE-2026-82542

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

EUVD-2026-68200

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-82542 Tenda HG10 Boa Web Server formIPv6Routing buffer overflow

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-82542

A buffer overflow in the Boa Web Server component of Tenda HG10 (version 300001138) affects the function formIPv6Routing in the file /boaform/admin/formIPv6Routing. The overflow is triggered by manipulating the destNet argument and is exploitable remotely with no authentication required , yieldin...

PT-2026-83551

A weakness has been identified in Tenda HG10 300001138. Affected by this issue is the function formIPv6Routing of the file /boaform/admin/formIPv6Routing of the component Boa Web Server. This manipulation of the argument destNet causes buffer overflow. The attack is possible to be carried out...

CVE-2026-76071 Netis NC63 V3.0.0.3327 Stack Buffer Overflow via destHost Parameter

Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf...

CVE-2026-73673

Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa web server and netis.cgi CGI dispatcher. Attackers can send ...