Fuhanhan2015

A command injection flaw exists in the ssi component within the `/cgi-bin/email.cgi` endpoint. The issue resides in the `log email server()` function, allowing a remote attacker to execute arbitrary commands through manipulation.

A remote attack is possible due to a stack-based buffer overflow in the `FUN 401000()` function within the `/sbin/mycli` file. This issue occurs when the `ssid` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution.

A remote stack-based buffer overflow exists within the ssi component of the '/cgi-bin/wan.cgi' endpoint. This issue occurs when the `cameo.wan.wan pppoe password 00` argument is manipulated. A stack-based buffer overflow is a condition where a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially leading to crashes or arbitrary code execution.

Remote command injection is possible via the `/cgi-bin/admin.cgi` endpoint. The issue occurs when the `Hostname` argument is manipulated, allowing an attacker to execute arbitrary commands on the system.

A remote command injection flaw exists in the `/cgi-bin/ping.cgi` endpoint. The issue occurs when the `wan type` argument is manipulated, allowing an attacker to execute arbitrary commands on the system.

A vulnerability was determined in TRENDnet TEW-821DAP 2.2.01b05. Affected is the function popen/system of the file /cgi-bin/ping.cgi of the component ssi. Executing a manipulation of the argument ipaddr can lead to command injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized.

A vulnerability was identified in TRENDnet TV-IP751WIC 11.03.03. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/admin/set time.cgi of the component alphapd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/set time.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

A stack-based buffer overflow exists in the NVRAM component. This issue occurs when the `strcpy()` function in the '/cgi-bin/wan.cgi' endpoint improperly handles the `wan l2tp password` argument, allowing a remote attacker to trigger the overflow.

A flaw in the `alphapd` component allows for a remote stack-based buffer overflow, which occurs when a buffer on the stack is overwritten. This issue affects the following functions: `SystemNetworkChanged()`, `SystemDDNSChanged()`, `SystemEmailChanged()`, `SystemFTPChanged()`, `websCheckRealm()`, `FUN 00432574()`, and `FUN 0043372C()`.