CVE-2021-3304: Buffer Copy without Checking Size of Input

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

Sagemcom F@ST3686 Buffer Error Vulnerability

The Sagemcom F@ST3686 is a router from Sagemcom France. A buffer error vulnerability exists in the Sagemcom F@ST 3686 v2 3.495 devices, which originates from a long sessionKey to a goform login URI...

PT-2021-20025

Name of the Vulnerable Software and Affected Versions Sagemcom F@ST 3686 v2 version 3.495 Description The issue is a buffer overflow that can be triggered by sending a long sessionKey to the "goform/login" URI. This can potentially allow for unauthorized access or code execution. Recommendations...

Belkin LINKSYS RE6500 Remote Code Execution Vulnerability

The Linksys RE6500 is an AC1200 dual-band WiFi extender from Belkin. A remote code execution vulnerability exists in Belkin LINKSYS RE6500 versions prior to 1.0.012.001. A remote attacker can exploit the vulnerability by using shell metacharacters on the goform/setSysAdm page to execute arbitrary...

CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

CVE-2020-35714

Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program...

PT-2020-17403

Name of the Vulnerable Software and Affected Versions Belkin LINKSYS RE6500 versions prior to 1.0.11.001 Description The issue allows remote authenticated users to execute arbitrary commands via the "goform/systemCommand?command=" endpoint in conjunction with the "goform/pingstart" program. This...

PT-2020-17405

Name of the Vulnerable Software and Affected Versions Belkin LINKSYS RE6500 versions prior to 1.0.012.001 Description The issue allows remote attackers to cause a persistent denial of service, resulting in a segmentation fault. This can be achieved by sending a long langSelectionOnly parameter vi...

CVE-2020-35713: Improper Neutralization of Special Elements used in an OS Command

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

CVE-2020-35714: Improper Neutralization of Special Elements used in an OS Command

Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program...

PT-2020-17402

Name of the Vulnerable Software and Affected Versions Belkin LINKSYS RE6500 versions prior to 1.0.012.001 Description The issue allows remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the "goform/setSysAdm" page. This can be exploited by sending...

Belkin LINKSYS RE6500 Command Injection Vulnerability

The Belkin LINKSYS RE6500 is a wireless router from Belkin USA. A command injection vulnerability exists in Belkin LINKSYS RE6500 devices prior to version 1.0.11.001, which can be exploited to allow a remote authenticated user to execute arbitrary commands via goform system commands...

Belkin LINKSYS RE6500 操作系统命令注入漏洞

The Linksys RE6500 is an AC1200 dual-band WiFi extender from Belkin. A remote code execution vulnerability exists in Belkin LINKSYS RE6500 versions prior to 1.0.012.001. A remote attacker can exploit the vulnerability by using shell metacharacters on the goform/setSysAdm page to execute arbitrary...

Tenda AC15 Remote Code Execution Vulnerability

Tenda AC15 AC1900 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in the goform/AdvSetLanip endpoint in the Tenda AC15 AC1900 version 15.03.05.19. The vulnerability can be exploited by a remote attacker to execute arbitrary system commands via shell...

PT-2020-14710

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description The issue concerns the "goform/AdvSetLanip" endpoint, which allows remote attackers to execute arbitrary system commands. This is achieved by injecting shell metacharacters into the lanIp POST...

CVE-2020-15916: Improper Neutralization of Special Elements used in an OS Command

goform/AdvSetLanip endpoint on Tenda AC15 AC1900 15.03.05.19 devices allows remote attackers to execute arbitrary system commands via shell metacharacters in the lanIp POST parameter...

Tenda AC15 AC1900 Remote Code Execution Vulnerability

Tenda AC15 AC1900 is a wireless router from Tenda, a Chinese company. A remote code execution vulnerability exists in the goform/setUsbUnload endpoint in the Tenda AC15 AC1900 version 15.03.05.19, which can be exploited to execute arbitrary system commands via the deviceName POST parameter...

CVE-2020-10987

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter...

PT-2020-12473

Name of the Vulnerable Software and Affected Versions Tenda AC15 AC1900 version 15.03.05.19 Description The issue is related to an XSS problem that allows remote attackers to execute malicious payloads. This is achieved via the WifiName POST parameter in the "/goform/WifiBasicSet" endpoint...