PT-2025-41007

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Several OS command injection flaws are present in the formPingCmd functionality. An attacker can execute arbitrary commands by sending a crafted series of HTTP requests. The counts request...

PT-2025-41001

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Several stack-based buffer overflow issues are present in the formPingCmd functionality. An attacker can exploit these by sending specially crafted HTTP requests. The buffer overflow is related ...

Planet WGR-500 安全漏洞

The Planet WGR-500 is a WiFi router from Planet Corporation of Taiwan, China. A security vulnerability exists in the Planet WGR-500 v1.3411b190912 version, which stems from a formatted string vulnerability in the formPingCmd function, which could lead to memory corruption...

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

PT-2025-41003

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Several stack-based buffer overflow issues are present in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is...

PT-2025-41002

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of HTTP requests to trigger these issues. The submit-url request parameter is...

PT-2025-41006

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description The Planet WGR-500 device contains OS command injection flaws within the formPingCmd functionality. Specifically crafted HTTP requests can result in arbitrary command execution. The issue is...