394 matches found
EUVD-2026-33331
A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function getupsfield of the file tomatodata.cgi. Executing a manipulation of the argument Date can lead to stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by...
CVE-2026-10065 Shibby Tomato tomatodata.cgi get_ups_field stack-based overflow
A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function getupsfield of the file tomatodata.cgi. Executing a manipulation of the argument Date can lead to stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by...
Shibby Tomato 安全漏洞
Shibby Tomato is a third-party router firmware developed by Shibby’s individual developers. Version 1.28 of Shibby Tomato contains a security vulnerability. This vulnerability stems from unknown functions in the usr/sbin/miniupnpd file, which may lead to resource consumption and potentially allow...
CVE-2026-10069: Uncontrolled Resource Consumption
A vulnerability has been found in Shibby Tomato 1.28. The impacted element is an unknown function of the file usr/sbin/miniupnpd. Such manipulation leads to resource consumption. The attack may be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects produc...
PT-2026-44888
Name of the Vulnerable Software and Affected Versions Shibby Tomato version 1.28 Description A remote attack can be launched against an unknown function within the usr/sbin/miniupnpd file, leading to resource consumption. This issue affects products that are no longer supported by the maintainer,...
Shibby Tomato 安全漏洞
Shibby Tomato is a third-party router firmware developed by Shibby’s individual developers. Versions of Shibby Tomato prior to 1.28 contained security vulnerabilities. These vulnerabilities were caused by a stack buffer overflow in the tomatoups.cgi file within the UPS service component, which...
Shibby Tomato 安全漏洞
Shibby Tomato is a third-party router firmware developed by Shibby’s individual developers. Version 1.28 of Shibby Tomato contains a security vulnerability. This vulnerability stems from a stack buffer overflow in the getupsfield function within the tomatodata.cgi file, which could allow a remote...
CVE-2026-10066: Stack-based Buffer Overflow
A security vulnerability has been detected in Shibby Tomato up to 1.28. This issue affects the function sub9068 of the file tomatoups.cgi of the component UPS Service. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. This project is superseded by...
PT-2026-44885
Name of the Vulnerable Software and Affected Versions Shibby Tomato versions prior to 1.29 Description A stack-based buffer overflow exists in the UPS Service component within the sub 9068 function of the tomatoups.cgi file. This issue allows a remote attacker to trigger the overflow through...
CVE-2026-10067: Stack-based Buffer Overflow
A vulnerability was detected in Shibby Tomato 1.28. Impacted is the function sub90F0 of the file multimon.cgi. The manipulation results in stack-based buffer overflow. The attack can be launched remotely. This project is superseded by FreshTomato. This vulnerability only affects products that are...
CVE-2026-10065: Stack-based Buffer Overflow
A weakness has been identified in Shibby Tomato 1.28. This vulnerability affects the function getupsfield of the file tomatodata.cgi. Executing a manipulation of the argument Date can lead to stack-based buffer overflow. It is possible to launch the attack remotely. This project is superseded by...
Shibby Tomato 安全漏洞
Shibby Tomato is a third-party router firmware developed by Shibby’s individual developers. Version 1.28 of Shibby Tomato contains a security vulnerability. This vulnerability stems from a stack buffer overflow in the sub90F0 function of the multimon.cgi file, which could lead to remote attacks...
PT-2026-44884
Name of the Vulnerable Software and Affected Versions Shibby Tomato version 1.28 Description A stack-based buffer overflow can be triggered remotely via the get ups field function within the 'tomatodata.cgi' file. This occurs when the Date argument is manipulated. A stack-based buffer overflow is...
PT-2026-44887
Name of the Vulnerable Software and Affected Versions Shibby Tomato version 1.28 Description A flaw in the SUBSCRIBE Call Handler component allows for server-side request forgery, a condition where an attacker can induce the server to make requests to an unintended location. The issue is located ...
CVE-2026-10068: Server-Side Request Forgery (SSRF)
A flaw has been found in Shibby Tomato 1.28. The affected element is the function send of the file usr/sbin/miniupnpd of the component SUBSCRIBE Call Handler. This manipulation causes server-side request forgery. The attack may be initiated remotely. This project is superseded by FreshTomato. Thi...
Shibby Tomato 安全漏洞
Shibby Tomato is a third-party router firmware developed by Shibby’s individual developers. Version 1.28 of Shibby Tomato contains a security vulnerability. This vulnerability stems from the send function in the us/sbin/miniupnpd file within the SUBSCRIBE Call Handler component, which involves...
PT-2026-44886
Name of the Vulnerable Software and Affected Versions Shibby Tomato version 1.28 Description A stack-based buffer overflow occurs in the sub 90F0 function within the 'multimon.cgi' file. This issue allows a remote attacker to manipulate the system via a buffer overflow, which happens when a progr...
WS-2019-0262
Tomato, in all versions, is vulnerable to Command Injection. The /api/exec endpoint does not validate user input which allows attackers to run arbitrary commands in the system...