PT-2026-25964

A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01. The impacted element is the function sub 420A78 of the file apply sec.cgi of the component Web Interface. Such manipulation of the argument Language leads to cross site scripting. It is possible to launch the attack remotely...

PT-2020-13885

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions through 2.06B04 Description The issue concerns a stack-based buffer overflow in the ssi binary, allowing an unauthenticated user to execute arbitrary code. This can be achieved by sending a POST request to the "app...

PT-2019-13421

Name of the Vulnerable Software and Affected Versions D-Link DIR-655 C versions prior to 3.02B05 BETA03 Description The issue allows remote attackers to force a blank password. This is achieved through the apply sec.cgi API endpoint, specifically by manipulating the setup wizard parameter...

PT-2019-13423

Name of the Vulnerable Software and Affected Versions D-Link DIR-655 C devices before version 3.02B05 BETA03 Description The issue allows for XSS, as demonstrated by the "/www/ping response.cgi" API endpoint with the ping ipaddr parameter, the "/www/ping6 response.cgi" API endpoint with the ping6...