Lucene search
+L

2526 matches found

Nuclei
Nuclei
•added 2026/11/09 2:03 a.m.•123 views

Trendnet AC2600 TEW-827DRU 2.08B01 - Admin Password Change

Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicious actor to force change the admin password due to a hidden administrative command. id: CVE-2021-20158 info: name: Trendnet AC2600 TEW-827DRU 2.08B01 - Admin...

9.8CVSS6.7AI score0.4006EPSS
SaveExploits1References4
Nuclei
Nuclei
•added 2026/11/08 2:03 a.m.•114 views

Trendnet AC2600 TEW-827DRU - Credentials Disclosure

Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. A user may view information as Admin by manually browsing to the setup wizard and forcing it to redirect to the desired page. id: CVE-2021-20150 info: name: Trendnet AC2600 TEW-827DR...

5.3CVSS5.7AI score0.4006EPSS
SaveExploits1References2
KittySploit
KittySploit
•added 2026/10/27 1:35 p.m.•21 views

TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reachi — Detect

Fingerprint / reachability check for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reaching Root Execution Through a Shell-Form system Call CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Serv...

6AI score
SaveExploits0References1
KittySploit
KittySploit
•added 2026/10/27 1:35 p.m.•19 views

TRENDnet TV-IP302PI NTP address command injection RCE

Authenticated CGI/ONVIF SetNTP: msntp -r sink with semicolon/command substitution in NtpIP / hostname field. """TRENDnet TV-IP302PI 1.02.38 - Command Injection in the NTP Server Address Reaching Root Execution Through a Shell-Form system Call CWE-78""" from future import annotations from types...

6AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2026/10/20 12:00 a.m.•33 views

TRENDnet TV-IP302PI 1.02.38 NTP Command Injection

TRENDnet TV-IP302PI version 1.02.38 contains an authenticated command injection vulnerability in the NTP server address that reaches a root shell-form system call. https://packetstorm.news/download/236511...

6AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/10/16 12:00 a.m.•14 views

TRENDnet TEW-432BRP Router Form TCP Setup DoS

The vulnerability of the formTcpipSetup function in the /goform/formTcpipSetup file of the TRENDnet TEW-432BRP router microprogramming system is related to the issue of data being written outside the buffer in memory when processing the Name parameter. Exploiting this vulnerability could allow an...

9.9CVSS8.8AI score0.00593EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/10/15 12:00 a.m.•17 views

PT-2026-116536

Уязвимость функции formTcpipSetup файла /goform/formTcpipSetup микропрограммного обеспечения маршрутизаторов TRENDnet TEW-432BRP связана с выходом операции за границы буфера в памяти при обработке параметра Name. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать...

9CVSS5.8AI score
SaveExploits0References2
NVD
NVD
•added 2026/10/13 11:17 a.m.•20 views

CVE-2026-109157

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

9.9CVSS0.00593EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/13 10:45 a.m.•20 views

EUVD-2026-98453

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

9.9CVSS9.1AI score0.00593EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/10/13 10:45 a.m.•12 views

CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

9.9CVSS9AI score0.00593EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/13 10:45 a.m.•35 views

CVE-2026-109157

The TRENDnet TEW-432BRP router (version 3.10B20) is susceptible to a stack-based buffer overflow in the formTcpipSetup function located in the /goform/formTcpipSetup file. The flaw is triggered by manipulating the Name argument, which can be exploited remotely . While the vendor confirms the prod...

9.9CVSS9AI score0.00593EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/13 10:45 a.m.•45 views

CVE-2026-109157 TRENDnet TEW-432BRP formTcpipSetup stack-based overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

9.9CVSS0.00593EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/10/13 12:00 a.m.•18 views

PT-2026-111408

Name of the Vulnerable Software and Affected Versions TRENDnet TEW-432BRP version 3.10B20 Description A stack-based buffer overflow occurs when manipulating the Name argument within the formTcpipSetup function located in the /goform/formTcpipSetup file. This issue allows a remote attacker to...

9.9CVSS8.8AI score0.00593EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•17 views

CVE-2026-109157: Stack-based Buffer Overflow

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

9.9CVSS9.1AI score0.00593EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/10/12 4:00 p.m.•15 views

TRENDnet tew-432brp firmware buffer error vulnerability

TRENDnet tew-432brp firmware version 3.10B20 contains a buffer error vulnerability. This vulnerability stems from the operation of the parameter Name in the function formTcpipSetup within the file /goform/formTcpipSetup. It may lead to a stack buffer overflow, and attackers could exploit this...

9.9CVSS8.6AI score0.00593EPSS
SaveExploits0References5
NVD
NVD
•added 2026/10/12 6:16 a.m.•21 views

CVE-2026-108804

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...

10CVSS0.02318EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/12 5:30 a.m.•130 views

CVE-2026-108804

The TRENDnet TEW-751DR , TEW-752DRU , and TEW733GR routers (firmware versions 1.03B01/1.03B03 ) are vulnerable to an OS command injection in the Web Management Backend . The flaw exists within the fwrite function of the pigwidgeon.cgi file, where manipulating the service argument allows for remot...

10CVSS8.6AI score0.02318EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/12 5:30 a.m.•61 views

CVE-2026-108804 TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...

10CVSS0.02318EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/12 5:30 a.m.•14 views

CVE-2026-108804 TRENDnet TEW-751DR/TEW-752DRU/TEW733GR Web Management Backend pigwidgeon.cgi fwrite os command injection

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...

10CVSS8.6AI score0.02318EPSS
SaveExploits0References6
EUVD
EUVD
•added 2026/10/12 5:30 a.m.•19 views

EUVD-2026-97238

A vulnerability was detected in TRENDnet TEW-751DR, TEW-752DRU and TEW733GR 1.03B01/1.03B03. Affected is the function fwrite of the file pigwidgeon.cgi of the component Web Management Backend. The manipulation of the argument service results in os command injection. It is possible to launch the...

10CVSS8.7AI score0.02318EPSS
SaveExploits0References6
Rows per page
Query Builder