EUVD-2026-36756

Tenda 5G03 V05.03.02.04 Version 1.0 is vulnerable to Command injection in the function actionimsonwithapn via the imsapn parameter...

CVE-2026-38065

The Tenda 5G03 router, specifically version V05.03.02.04 (Version 1.0) , is vulnerable to Command injection . The flaw exists in the action_ims_on_with_apn() function due to the improper neutralization of special elements in the ims_apn parameter. This allows an attacker to execute arbitrary comm...

PT-2026-49296

Name of the Vulnerable Software and Affected Versions Tenda 5G03 version V05.03.02.04 Version 1.0 Description Command injection is possible in the action ims on with apn function through the ims apn parameter. Recommendations At the moment, there is no information about a newer version that...

EUVD-2017-5241

Malware in sbrugna...

The vulnerability in the usbISP_detail_edit.cgi script of Netgear R7000P router software allows a hacker to induce a service failure.

The vulnerability in the usbISPdetailedit.cgi script of Netgear R7000P router microprogramming software relates to the copying of buffers without checking the size of input data during the processing of the apn parameter. Exploiting this vulnerability allows a malicious actor to cause service...

CVE-2024-51020

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISPdetailedit.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2024-51020: Buffer Copy without Checking Size of Input

Netgear R7000P v1.3.3.154 was discovered to contain a stack overflow via the apn parameter at usbISPdetailedit.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

NETGEAR R7000P 安全漏洞

The NETGEAR R7000P is a wireless router from NETGEAR. A buffer overflow vulnerability exists in NETGEAR R7000P v1.3.3.154, which originates from the apn parameter in the usbISPdetailedit.cgi component that fails to correctly validate the length of the input data, and can be exploited by a remote...

Cross site scripting

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page...

CVE-2017-13724

CVE-2017-13724 describes a stored Cross-Site Scripting vulnerability in the APN parameter on the Axesstel MU553S MU55XS devices running firmware v1.14, on the Basic Settings page. The affected component is the APN field handling in that page; the root cause is a stored XSS flaw that can persist u...

CVE-2017-13724

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page...

CVE-2017-13724: Improper Neutralization of Input During Web Page Generation

On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross Site Scripting vulnerability in the APN parameter under the "Basic Settings" page...