Lucene search
+L

48 matches found

Kitploit
Kitploit
added 2026/09/16 7:54 p.m.11 views

tenda-hg10-rce

CVE-2026-1689 摘要 Tenda HG10 路由器存在命令注入漏洞。该漏洞出现在 formLogin 端点中,原因是 Host 参数处理不当。 由于该漏洞在身份验证检查之前执行,因此无需验证任何认证凭据。 来自 Host 头的用户输入未经验证便直接作为命令执行: root@kitploit: ifconfig br0 | grep 'inet6' | grep '' 使用方法 包含一个简单脚本(exploit.go),该脚本接受包含 IP:端口/URL 对的文件,用于批量利用。 发现 超过 10 万台设备处于活跃状态,其中超过 1.5 万台已经过测试并确认为易受攻击。...

7.5CVSS7.7AI score0.02694EPSS
SaveExploits1
NVD
NVD
added 2026/09/03 2:17 p.m.9 views

CVE-2026-85109

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

10CVSS0.00622EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/03 1:30 p.m.11 views

EUVD-2026-70468

A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...

10CVSS7.7AI score0.00622EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/03 1:30 p.m.36 views

CVE-2026-85109

CVE-2026-85109 affects the Boa Web Server component of the Tenda HG10 (firmware 300001138). The vulnerability resides in the formLogin function within the file /boaform/formLogin. By manipulating the Username argument, an attacker can trigger a buffer overflow . The attack is remote and requires ...

10CVSS7.7AI score0.00622EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/09/03 12:00 a.m.19 views

PT-2026-85028

Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 affected versions not specified Description A buffer overflow can be triggered remotely within the Boa Web Server component. The issue exists in the formLogin function located in the /boaform/formLogin file when the Userna...

10CVSS8.6AI score0.00622EPSS
SaveExploits0References11
RedhatCVE
RedhatCVE
added 2026/03/05 1:57 a.m.14 views

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

9.8CVSS6.1AI score0.00485EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/03/05 12:31 a.m.20 views

EUVD-2025-208291

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

9.8CVSS6.1AI score0.00485EPSS
SaveExploits1References4
OSV
OSV
added 2026/03/04 10:16 p.m.11 views

CVE-2025-70222

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

9.8CVSS6AI score0.00485EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/04 10:16 p.m.15 views

CVE-2025-70222

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

9.8CVSS0.00485EPSS
SaveExploits1References3
OSV
OSV
added 2026/03/04 9:16 p.m.16 views

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

9.8CVSS6AI score0.00485EPSS
SaveExploits1References3
NVD
NVD
added 2026/03/04 9:16 p.m.23 views

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

9.8CVSS0.00485EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2026/03/04 12:00 a.m.19 views

D-Link DIR-513 安全漏洞

The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formLogin function...

9.8CVSS6AI score0.00485EPSS
SaveExploits1References3
CVE
CVE
added 2026/03/04 12:00 a.m.36 views

CVE-2025-70221

CVE-2025-70221 affects D-Link DIR-513 v1.10. The vulnerability is a stack buffer overflow in the goform/formLogin path triggered by the curTime parameter. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no user interaction, and with high impact to confidentiality, integrity, and ...

9.8CVSS6.1AI score0.00485EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.15 views

PT-2026-23063

Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered by providing input to the curTime parameter within the ''/goform/formLogin'' and ''/goform/getAuthCode'' AP...

9.8CVSS6.1AI score0.00485EPSS
SaveExploits1References6
attackerkb
attackerkb
added 2026/03/04 12:00 a.m.11 views

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

6.1AI score0.00485EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/03/04 12:00 a.m.7 views

CVE-2025-70222

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

6.1AI score0.00485EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/03/04 12:00 a.m.49 views

CVE-2025-70222

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...

0.00485EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/03/04 12:00 a.m.55 views

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

0.00485EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/03/04 12:00 a.m.16 views

PT-2026-23061

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

6.1AI score0.00485EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/03/04 12:00 a.m.10 views

CVE-2025-70221

Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...

6.1AI score0.00485EPSS
SaveExploits1References3
Rows per page
Query Builder