48 matches found
tenda-hg10-rce
CVE-2026-1689 Summary A command injection vulnerability exists in the Tenda HG10 router. It occurs in the formLogin endpoint due to improper handling of the Host parameter. No authentication credentials are verified as this executes before the check. User input from the Host header is directly...
CVE-2026-85109
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
EUVD-2026-70468
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2026-85109
CVE-2026-85109 affects the Boa Web Server component of the Tenda HG10 (firmware 300001138). The vulnerability resides in the formLogin function within the file /boaform/formLogin. By manipulating the Username argument, an attacker can trigger a buffer overflow . The attack is remote and requires ...
PT-2026-85028
Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 affected versions not specified Description A buffer overflow can be triggered remotely within the Boa Web Server component. The issue exists in the formLogin function located in the /boaform/formLogin file when the Userna...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
EUVD-2025-208291
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
D-Link DIR-513 安全漏洞
The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formLogin function...
PT-2026-23063
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered by providing input to the curTime parameter within the ''/goform/formLogin'' and ''/goform/getAuthCode'' AP...
CVE-2025-70221
CVE-2025-70221 affects D-Link DIR-513 v1.10. The vulnerability is a stack buffer overflow in the goform/formLogin path triggered by the curTime parameter. The CVSS 3.1 score is 9.8 (CRITICAL) with network attack vector, no user interaction, and with high impact to confidentiality, integrity, and ...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
D-Link DIR-513 安全漏洞
The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the curTime parameters of the goform/formLogin and goform/getAuthCode functions...