CVE-2026-29520

Hereta ETH-IMC408M firmware version 1.0.15 and prior contain a reflected cross-site scripting vulnerability in the Network Diagnosis ping function that allows attackers to execute arbitrary JavaScript. Attackers can craft malicious links with injected script payloads in the pingipaddr parameter t...

CVE-2026-4172 TRENDnet TEW-632BRP HTTP POST Request ping_response.cgi stack-based overflow

A vulnerability was detected in TRENDnet TEW-632BRP 1.010B32. This affects an unknown part of the file /pingresponse.cgi of the component HTTP POST Request Handler. The manipulation of the argument pingipaddr results in stack-based buffer overflow. The attack may be performed from remote. The...

PT-2025-33133 · D Link · D-Link Dir-825

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 2.10 Description: A vulnerability exists in the httpd component of D-Link DIR-825 version 2.10. The vulnerability is located in the get ping app stat function within the ping response.cgi file. Manipulation of the ping...

D-Link DIR-825 安全漏洞

The D-Link DIR-825 is a router from China-based AUO D-Link. The D-Link DIR-825 suffers from a buffer overflow vulnerability that originates from the incorrect operation of the parameter pingipaddr in the file pingresponse.cgi, which can be exploited by an attacker to crash the system by corruptin...

CVE-2021-28841

Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to applycgi via an action pingtest without a pingipaddr key...

CVE-2021-28841

Null Pointer Dereference vulnerability in TRENDnet TEW-755AP 1.11B03, TEW-755AP2KAC 1.11B03, TEW-821DAP2KAC 1.11B03, and TEW-825DAP 1.11B03, which could let a remote malicious user cause a denial of service by sending a POST request to applycgi via an action pingtest without a pingipaddr key...

PT-2021-21628

Name of the Vulnerable Software and Affected Versions D-Link DIR-615 C2 version 3.03WW Description A buffer overflow issue exists, allowing an attacker to potentially crash the webserver and gain remote code execution by exploiting the ping ipaddr parameter in the "ping response.cgi" POST request...

PT-2020-13885

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-827DRU versions through 2.06B04 Description The issue concerns a stack-based buffer overflow in the ssi binary, allowing an unauthenticated user to execute arbitrary code. This can be achieved by sending a POST request to the "app...

PT-2020-13070

Name of the Vulnerable Software and Affected Versions Beeline Smart Box version 2.0.38 Description The issue allows OS command injection via the "Advanced settings Other Diagnostics" feature. Specifically, it affects the ping ipaddr parameter in the Ping function, the nslookup ipaddr parameter in...

PT-2019-13423

Name of the Vulnerable Software and Affected Versions D-Link DIR-655 C devices before version 3.02B05 BETA03 Description The issue allows for XSS, as demonstrated by the "/www/ping response.cgi" API endpoint with the ping ipaddr parameter, the "/www/ping6 response.cgi" API endpoint with the ping6...

VulnCheck KEV: CVE-2016-10760

On Seowon Intech routers, there is a Command Injection vulnerability in diagnostic.cgi via shell metacharacters in the pingipaddr parameter...

PT-2019-7556

Name of the Vulnerable Software and Affected Versions Seowon Intech routers affected versions not specified Description The issue is related to a Command Injection vulnerability in the diagnostic.cgi of Seowon Intech routers. This vulnerability can be exploited via shell metacharacters in the pin...

PT-2019-6523

Name of the Vulnerable Software and Affected Versions Linksys WAG54G2 version 1.00.10 Description The issue is related to authenticated command injection via shell metacharacters in the c4 ping ipaddr variable of the setup.cgi. This allows for potential exploitation. No information is provided...

PT-2014-3280

Name of the Vulnerable Software and Affected Versions Seowon Intech SWC-9100 routers affected versions not specified Description The issue concerns the ping functionality in the cgi-bin/diagnostic.cgi file, which allows remote attackers to execute arbitrary commands. This is achieved by injecting...