CVE-2021-3304

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

CVE-2021-3304

Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI...

Sagemcom F@ST3686 Buffer Error Vulnerability

The Sagemcom F@ST3686 is a router from Sagemcom France. A buffer error vulnerability exists in the Sagemcom F@ST 3686 v2 3.495 devices, which originates from a long sessionKey to a goform login URI...

Belkin LINKSYS RE6500 Remote Code Execution Vulnerability

The Linksys RE6500 is an AC1200 dual-band WiFi extender from Belkin. A remote code execution vulnerability exists in Belkin LINKSYS RE6500 versions prior to 1.0.012.001. A remote attacker can exploit the vulnerability by using shell metacharacters on the goform/setSysAdm page to execute arbitrary...

CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

CVE-2020-35713

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page...

CVE-2020-35714

Belkin LINKSYS RE6500 devices before 1.0.11.001 allow remote authenticated users to execute arbitrary commands via goform/systemCommand?command= in conjunction with the goform/pingstart program...

Belkin LINKSYS RE6500 操作系统命令注入漏洞

The Linksys RE6500 is an AC1200 dual-band WiFi extender from Belkin. A remote code execution vulnerability exists in Belkin LINKSYS RE6500 versions prior to 1.0.012.001. A remote attacker can exploit the vulnerability by using shell metacharacters on the goform/setSysAdm page to execute arbitrary...

Belkin LINKSYS RE6500 Command Injection Vulnerability

The Belkin LINKSYS RE6500 is a wireless router from Belkin USA. A command injection vulnerability exists in Belkin LINKSYS RE6500 devices prior to version 1.0.11.001, which can be exploited to allow a remote authenticated user to execute arbitrary commands via goform system commands...

Tenda AC15 Remote Code Execution Vulnerability

Tenda AC15 AC1900 is a wireless router from Tenda, a Chinese company. A security vulnerability exists in the goform/AdvSetLanip endpoint in the Tenda AC15 AC1900 version 15.03.05.19. The vulnerability can be exploited by a remote attacker to execute arbitrary system commands via shell...

Tenda AC15 AC1900 Remote Code Execution Vulnerability

Tenda AC15 AC1900 is a wireless router from Tenda, a Chinese company. A remote code execution vulnerability exists in the goform/setUsbUnload endpoint in the Tenda AC15 AC1900 version 15.03.05.19, which can be exploited to execute arbitrary system commands via the deviceName POST parameter...

CVE-2020-10987

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31408)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in several Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'deviceId' and 'time' parameters to the...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31387)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in multiple Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'entrys' and 'mitInterface' parameters to the /goform/addressNa...

Buffer overflow vulnerability in multiple Tenda products (CNVD-2020-31386)

The Tenda AC9, among others, is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in httpd in multiple Tenda products. The vulnerability can be exploited to execute arbitrary code by sending the 'schedStartTime' and 'schedEndTime' parameters to the...

CVE-2019-13395

The Voo branded NETGEAR CG3700b custom firmware V2.02.03 allows CSRF against all /goform/ URIs. An attacker can modify all settings including WEP/WPA/WPA2 keys, restore the router to factory settings, or even upload an entire malicious configuration file...

CVE-2019-19516

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...

CVE-2019-19516

Intelbras WRN 150 1.0.18 devices allow CSRF via GO=systempassword.asp to the goform/SysToolChangePwd URI to change a password...

PT-2019-15863 · Intelbras · Intelbras Wrn 150

Name of the Vulnerable Software and Affected Versions: Intelbras WRN 150 version 1.0.18 Description: The issue allows for cross-site request forgery CSRF attacks, which can be used to change a password. This can be achieved by accessing the goform/SysToolChangePwd URI with GO=system password.asp...

Tenda N301 Input Validation Error Vulnerability

The Tenda N301 is a wireless router from the Chinese company Tenda. An input validation error vulnerability exists in the Tenda N301. An attacker can exploit this vulnerability by sending the 'wifiSSID' parameter with a long string to goform/setWifi, causing the application to crash...