Lucene search
+L

13 matches found

BDU FSTEC
BDU FSTEC
•added 2026/05/29 12:00 a.m.•11 views

The vulnerability of the formPing6() function in the Boa microprogramming software-based router Tenda HG9 HTTP server allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formPing6 function on the Boa microprogrammed software-based Tenda HG9 router’s HTTP server is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure...

9CVSS8AI score0.01026EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2026/02/22 4:15 a.m.•16 views

CVE-2026-2910

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

8.8CVSS6.4AI score0.01026EPSS
SaveExploits1References5
NVD
NVD
•added 2026/02/22 4:15 a.m.•26 views

CVE-2026-2910

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

9CVSS0.01026EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2026/02/22 2:32 a.m.•54 views

CVE-2026-2910 Tenda HG9 formPing6 stack-based overflow

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

9CVSS0.01026EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2026/02/22 2:32 a.m.•13 views

CVE-2026-2910 Tenda HG9 formPing6 stack-based overflow

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

9CVSS8.2AI score0.01026EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/22 12:00 a.m.•3 views

CVE-2026-2910: Stack-based Buffer Overflow

A flaw has been found in Tenda HG9 300001138. This vulnerability affects unknown code of the file /boaform/formPing6. Executing a manipulation of the argument pingAddr can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

9CVSS8.4AI score0.01026EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/02/22 12:00 a.m.•24 views

Tenda HG9 安全漏洞

The Tenda HG9 is a WiFi router produced by the Chinese company Tenda. The Tenda HG9 300001138 version has a security vulnerability. This vulnerability stems from incorrect handling of the parameter “pingAddr” in files like /boaform/formPing6, which may lead to a stack buffer overflow...

9CVSS7.7AI score0.01026EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/02/21 12:00 a.m.•16 views

PT-2026-21411

Name of the Vulnerable Software and Affected Versions Tenda HG9 versions prior to 300001139 Description A stack-based buffer overflow issue exists in the Tenda HG9 device. The flaw is located in the file '/boaform/formPing6' and can be triggered by manipulating the pingAddr argument. This allows...

9CVSS8.3AI score0.01026EPSS
SaveExploits1References13
NVD
NVD
•added 2025/09/03 4:15 p.m.•23 views

CVE-2025-56498

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit...

5.3CVSS0.01722EPSS
SaveExploits1References2
VulnCheck KEV
VulnCheck KEV
•added 2023/06/22 12:00 a.m.•9 views

VulnCheck KEV: CVE-2022-40005

Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute...

8.8CVSS8.2AI score0.35028EPSS
SaveIn wildExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/25 12:00 a.m.•3 views

CVE-2022-40005: Improper Neutralization of Special Elements used in an OS Command

Intelbras WiFiber 120AC inMesh before 1-1-220826 allows command injection by authenticated users, as demonstrated by the /boaform/formPing6 and /boaform/formTracert URIs for ping and traceroute...

8.8CVSS8.2AI score0.35028EPSS
SaveExploits3References3
Positive Technologies
Positive Technologies
•added 2022/12/25 12:00 a.m.•19 views

PT-2022-25163 · Intelbras · Intelbras Wifiber 120Ac Inmesh

Name of the Vulnerable Software and Affected Versions: Intelbras WiFiber 120AC inMesh versions before 1-1-220826 Description: The issue allows command injection by authenticated users. This is demonstrated by the "/boaform/formPing6" and "/boaform/formTracert" URIs for ping and traceroute...

8.8CVSS9.8AI score0.35028EPSS
SaveExploits3References8
Packet Storm
Packet Storm
•added 2022/05/03 12:00 a.m.•208 views

Tenda HG6 3.3.0 Remote Command Injection

Tenda HG6 v3.3.0 Remote Command Injection Vulnerability Vendor: Tenda Technology Co.,Ltd. Product web page: https://www.tendacn.com https://www.tendacn.com/product/HG6.html Affected version: Firmware version: 3.3.0-210926 Software version: v1.1.0 Hardware Version: v1.0 Check Version:...

7.4AI score
SaveExploits0
Rows per page
Query Builder