61 matches found
tenda-hg10-rce
CVE-2026-1689 요약 Tenda HG10 라우터에 명령 주입 취약점이 존재합니다. 이 취약점은 formLogin 엔드포인트에서 Host 매개변수를 부적절하게 처리하여 발생합니다. 이 취약점은 인증 확인 이전에 실행되므로 인증 자격 증명이 검증되지 않습니다. Host 헤더의 사용자 입력은 검증 없이 명령으로 직접 실행됩니다: ifconfig br0 | grep 'inet6' | grep '' 사용법 간단한 스크립트exploit.go가 포함되어 있으며, 대량 공격을 위해 IP:port/URL 쌍이 포함된 파일을 입력으로...
CVE-2026-85109
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
EUVD-2026-70468
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2026-85109 Tenda HG10 Boa Web Server formLogin buffer overflow
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2026-85109
CVE-2026-85109 affects the Boa Web Server component of the Tenda HG10 (firmware 300001138). The vulnerability resides in the formLogin function within the file /boaform/formLogin. By manipulating the Username argument, an attacker can trigger a buffer overflow . The attack is remote and requires ...
CVE-2026-85109 Tenda HG10 Boa Web Server formLogin buffer overflow
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
PT-2026-85028
Name of the Vulnerable Software and Affected Versions Tenda HG10 300001138 affected versions not specified Description A buffer overflow can be triggered remotely within the Boa Web Server component. The issue exists in the formLogin function located in the /boaform/formLogin file when the Userna...
CVE-2026-85109: Buffer Copy without Checking Size of Input
A vulnerability was determined in Tenda HG10 300001138. This issue affects the function formLogin of the file /boaform/formLogin of the component Boa Web Server. Executing a manipulation of the argument Username can lead to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
EUVD-2025-208291
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70231: Improper Limitation of a Pathname to a Restricted Directory
D-Link DIR-513 version 1.10 contains a critical-level vulnerability. When processing POST requests related to verification codes in /goform/formLogin, it enters /goform/getAuthCode but fails to filter the value of the FILECODE parameter, resulting in a path traversal vulnerability...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70222
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin,goform/getAuthCode...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
PT-2026-23063
Name of the Vulnerable Software and Affected Versions D-Link DIR-513 version 1.10 Description A stack buffer overflow condition exists in D-Link DIR-513 version 1.10. The issue is triggered by providing input to the curTime parameter within the ''/goform/formLogin'' and ''/goform/getAuthCode'' AP...
CVE-2025-70221
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formLogin...
D-Link DIR-513 安全漏洞
The D-Link DIR-513 is a wireless router product from the D-Link company. The D-Link DIR-513 v1.10 version has a security vulnerability, which stems from a stack buffer overflow in the curTime parameter of the goform/formLogin function...
CVE-2025-70221
The D-Link DIR-513 wireless router, running firmware version v1.10 , is vulnerable to a stack buffer overflow vulnerability. The flaw is triggered via the curTime parameter within the goform/formLogin function. This vulnerability can lead to a critical impact on confidentiality, integrity, and av...