CVE-2025-29277

CVE-2025-29277 Prova di concetto PoC: Nella scheda Diagnostics, accedi allo strumento Ping6 e, nel campo Host Address, inserisci un host valido seguito da un punto e virgola ; e dal comando desiderato. Per esempio: root@kitploit: example.com;id Descrizione: L'invio del payload sopra indicato allo...

CVE-2026-2910

CVE-2026-2910 affects the Tenda HG9 line, specifically versions prior to 300001139. The vulnerability resides in the file /boaform/formPing6, where manipulating the pingAddr argument triggers a stack-based overflow. It can be exploited remotely, and an exploit has been published. Remediation: upg...

CVE-2025-58381: Path Traversal: '.../...//'

A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to modify the path variables and move upwards in the directory structure or to traverse to different directories...

CVE-2019-20075

On Netis DL4323 devices, pingrttv6.html has XSS Ping6 Diagnostic...

EUVD-2025-7533

Malicious code in bioql PyPI...

EUVD-2025-26602

Malicious code in bioql PyPI...

D-Link DIR-825 Router Code Execution

The vulnerability of the getping6appstat function in D-Link DIR-825 router microprogramming software is related to the execution of operations outside the buffer in memory when processing the ping6ipaddr parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code b...

CVE-2025-10034

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-10034

D-Link DIR-825 1.08.01 is affected in the httpd component (ping6_response.cg) via get_ping6_app_stat; manipulating the ping6_ipaddr parameter triggers a buffer overflow. The flaw enables remote exploitation and is documented as already public. The vulnerability affects products no longer supporte...

CVE-2025-10034 D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow

A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function getping6appstat of the file ping6response.cg of the component httpd. Performing manipulation of the argument ping6ipaddr results in buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-56498

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit...

CVE-2025-56498

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit...

CVE-2025-56498: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit...

CVE-2025-56498

An OS command injection vulnerability exists in the PLDT WiFi Router's Prolink PGN6401V (Firmware version 8.1.2 ) web management interface. The flaw occurs because the ping6.asp page submits the pingAddr parameter to the /boaform/formPing6 endpoint without proper sanitization. An authenticated at...

PT-2025-35785

Name of the Vulnerable Software and Affected Versions: PLDT WiFi Router Prolink PGN6401V Firmware version 8.1.2 Description: An OS command injection flaw exists in the web management interface. The ping6.asp page submits user input to the /boaform/formPing6 API endpoint via the pingAddr parameter...

PLDT WiFi Router Prolink PGN6401V has security vulnerabilities

PLDT WiFi Router Prolink PGN6401V is a router from PLDT Philippines. A security vulnerability exists in PLDT WiFi Router Prolink PGN6401V Firmware version 8.1.2, which stems from insufficient cleanup of the pingAddr parameter in the ping6.asp page, which could lead to OS command injection...

PT-2025-36373

Name of the Vulnerable Software and Affected Versions: D-Link DIR-825 version 1.08.01 Description: A buffer overflow issue exists in the httpd component of D-Link DIR-825. The get ping6 app stat function within the ping6 response.cg file is affected. Manipulation of the ping6 ipaddr argument can...

CVE-2025-29523

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...

CVE-2025-29523

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...

CVE-2025-29523: Improper Neutralization of Special Elements used in a Command

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...