CVE-2018-10080: Insufficient Verification of Data Authenticity

Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52esFRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wandns.asp request in conjunction with a crafted admin cookie...

Tenda AC15 Authentication Vulnerability

Tenda AC15 is a wireless router product from Tenda, a Chinese company. A security vulnerability exists in the Tenda AC15, which originates from some default accounts on the device having root privileges. The vulnerability can be exploited by a remote attacker to create a telnetd service by sendin...

CVE-2017-11649

Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...

CVE-2017-11649: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in DrayTek Vigor AP910C devices with firmware 1.2.0RC3 build r6594 allows remote attackers to hijack the authentication of unspecified users for requests that enable SNMP on the remote device via vectors involving goform/setSnmp...

PT-2018-5333

Name of the Vulnerable Software and Affected Versions DrayTek Vigor AP910C version 1.2.0 RC3 build r6594 Description A cross-site request forgery issue allows remote attackers to hijack user authentication for requests that enable SNMP on the device. This is achieved via vectors involving the...

CVE-2018-5716: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can have access to files on the File System of the Server. By specifying a pathname in the POST parameter "lf" to the goform/editlfgetdata UR...

PT-2018-2496

Name of the Vulnerable Software and Affected Versions Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52 es FRI01 Description The issue is related to insufficient authentication of data, which can be exploited by a remote attacker to change DNS settings. This can be achieved by...

CVE-2018-6355: Improper Neutralization of Input During Web Page Generation

/goform/setLang on iBall 300M devices with "iB-WRB302N1.0.1-Sep 8 2017" firmware has Unauthenticated Stored Cross Site Scripting via the lang parameter...

PT-2018-17498

Name of the Vulnerable Software and Affected Versions iBall 300M version iB-WRB302N 1.0.1-Sep 8 2017 Description The issue concerns an Unauthenticated Stored Cross Site Scripting vulnerability. It is exploited via the lang parameter in the "/goform/setLang" API endpoint. Recommendations For versi...

PT-2018-1179

Name of the Vulnerable Software and Affected Versions Tenda AC15 affected versions not specified Description The issue is related to insufficient access control in the Tenda AC15 router's firmware. It allows a remote attacker to gain root access to the device by initiating a special request to th...

PT-2017-16428

Name of the Vulnerable Software and Affected Versions Cambium Networks cnPilot firmware versions 4.3.2-R4 and prior Description The issue allows a low-privilege 'user' account to access the configuration file via direct object reference DOR at the "http:///goform/down cfg file" endpoint, despite...

Vonage VDV-23 115 Denial of Service Vulnerability

The Vonage VDV-23 115 is a routing repeater from Vonage USA. A security vulnerability exists in the Vonage VDV-23 115 version 3.2.11-0.9.40. An attacker can exploit this vulnerability to cause a router reboot by sending a loginPassword and/or loginUsername field with a long string to goform/login...

The vulnerability of the AirLink router’s microprogramming software, related to the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary commands.

The vulnerability of the AirLink router’s microprogramming software is related to the lack of measures taken for data cleaning at the control level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using metasymbols on certain pages /goform/...

CVE-2017-16902: Improper Restriction of Operations within the Bounds of a Memory Buffer

On the Vonage VDV-23 115 3.2.11-0.9.40 home router, sending a long string of characters in the loginPassword and/or loginUsername field to goform/login causes the router to reboot...

PT-2017-14629

Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 version 3.2.11-0.9.40 Description The issue occurs when a long string of characters is sent in the loginPassword and/or loginUsername field to the "goform/login" endpoint, causing the router to reboot. Recommendations For...

Cross site scripting

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

CVE-2017-16843

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

CVE-2017-16843: Improper Neutralization of Input During Web Page Generation

Vonage VDV-23 115 3.2.11-0.9.40 devices have stored XSS via the NewKeyword or NewDomain field to /goform/RgParentalBasic...

PT-2017-14590

Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 versions 3.2.11-0.9.40 Description The issue concerns stored XSS that can be triggered via the NewKeyword or NewDomain field to the "/goform/RgParentalBasic" API endpoint. Recommendations For Vonage VDV-23 115 versions...

Multiple Jensen of Scandinavia AS Air:Link Router Stack Buffer Overflow Vulnerabilities

Jensen of Scandinavia AS Air:Link 3G and others are routers from Jensen of Scandinavia AS in Norway. A stack buffer overflow vulnerability exists in multiple Jensen of Scandinavia AS Air:Link routers. A remote attacker could exploit this vulnerability by leveraging multiple parameters in the...