EUVD-2025-6521

Malicious code in bioql PyPI...

EUVD-2022-30103

Malicious code in bioql PyPI...

EUVD-2023-46060

Malicious code in bioql PyPI...

EUVD-2023-46057

Malicious code in bioql PyPI...

EUVD-2022-30098

Malicious code in bioql PyPI...

EUVD-2022-30110

Malicious code in bioql PyPI...

EUVD-2022-39276

Malicious code in bioql PyPI...

EUVD-2022-39274

Malicious code in bioql PyPI...

EUVD-2023-46049

Malicious code in bioql PyPI...

The vulnerability of the formexeCommand()/goform/exeCommand function of the cmdinput component in the Tenda AC9 and AC15 microprogrammable routers allows a attacker to execute arbitrary commands.

The vulnerability of the formexeCommand function /goform/exeCommand of the cmdinput component in the Tenda AC9 and AC15 microprogrammed devices lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the path parameter. Exploiting this...

The vulnerability of the formSetSambaConf() function in the Tenda AC9 router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the formSetSambaConf function in the Tenda AC9 router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the usb.samba.guest.user parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the GetValue() function in Tenda AC9 microprogramming software allows a hacker to induce a service failure.

The vulnerability of the GetValue function in Tenda AC9 router microprogramming software is related to buffer overflow in dynamic memory when processing the sys.vendor parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2025-57639

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf function of the httpd file...

CVE-2025-57638

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...

CVE-2025-57638

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...

CVE-2025-57638

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...

CVE-2025-57639

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf function of the httpd file...

CVE-2025-57639

OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user parameter in the formSetSambaConf function of the httpd file...

CVE-2025-57638: Heap-based Buffer Overflow

Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value...

CVE-2025-57638

A heap-based buffer overflow vulnerability exists in the Tenda AC9 wireless router (version 1.0 ) within the GetValue() function of the microprogramming software. The flaw is triggered during the processing of the user-supplied sys.vendor configuration parameter. A remote attacker can exploit thi...