Lucene search
+L

27 matches found

OSV
OSV
•added 2025/10/06 7:15 a.m.•15 views

CVE-2025-11324

A vulnerability was identified in Tenda AC18 15.03.05.196318. Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is public...

8.7CVSS6.5AI score0.00827EPSS
SaveExploits1References5
CVE
CVE
•added 2025/10/06 6:32 a.m.•37 views

CVE-2025-11324

CVE-2025-11324 affects Tenda AC18 (firmware 15.03.05.19(6318)). The vulnerability is a stack-based buffer overflow in an unknown function within /goform/setNotUpgrade caused by improper handling of the newVersion parameter. Exploitation can be performed remotely; a public exploit exists. Affected...

9CVSS8.8AI score0.00827EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/10/06 6:32 a.m.•26 views

CVE-2025-11324 Tenda AC18 setNotUpgrade stack-based overflow

A vulnerability was identified in Tenda AC18 15.03.05.196318. Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is public...

9CVSS0.00827EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/06 12:00 a.m.•2 views

CVE-2025-11324: Stack-based Buffer Overflow

A vulnerability was identified in Tenda AC18 15.03.05.196318. Affected by this vulnerability is an unknown functionality of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is public...

9CVSS6.3AI score0.00827EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/10/06 12:00 a.m.•14 views

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the parameter newVersion in the file /goform/setNotUpgrade fails to correct...

9CVSS8.3AI score0.00827EPSS
SaveExploits1References5
NVD
NVD
•added 2021/09/09 11:15 p.m.•29 views

CVE-2020-19283

A reflected cross-site scripting XSS vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS0.02633EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/09 12:00 a.m.•4 views

CVE-2020-19283: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...

6.1CVSS6.1AI score0.02633EPSS
SaveExploits1References2
Rows per page
Query Builder