GHSA-HF8C-XR89-VFM5 Command Injection in ungit

The package ungit before 1.5.20 are vulnerable to Remote Code Execution RCE via argument injection. The issue occurs when calling the /api/fetch endpoint. User controlled values remote and ref are passed to the git fetch command. By injecting some git options it was possible to get arbitrary...

Tenda AC9 saveparentcontrolinfo function stack overflow vulnerability (CNVD-2022-25785)

Tenda AC9 is a wireless router from Tenda, China.A stack overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by attackers to cause arbitrary command execution...

Tenda AC6 SetPptpServerCfg Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetPptpServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Formsetqosband Function Stack Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda AC9 Formsetqosband function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 PowerSaveSet Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 PowerSaveSet function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26243)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the ntpserver parameter in the SetSysTimeCfg function that does not properly validate data boundaries when performing operations on memory, and can be...

Tenda AC6 SetPptpServerCfg function stack overflow vulnerability (CNVD-2022-24433)

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetPptpServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 Buffer Overflow Vulnerability

Tenda AC6 is a wireless router from Tenda, China. Tenda AC6 is vulnerable to a buffer overflow vulnerability, which stems from the deviceId parameter in the saveParentControlInfo function that does not properly validate data boundaries when performing operations on memory, and can be exploited by...

Tenda AC6 SetSysTimeCfg Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetSysTimeCfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 WifiBasicSet Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 WifiBasicSet function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 saveparentcontrolinfo function stack overflow vulnerability

The Tenda AC9 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC9 saveparentcontrolinfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Command Injection Vulnerability (CNVD-2022-26241)

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the dosystemcmd parameter in the suba3550 function to properly filter the special elements of the construction snippet, which can be exploited...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26246)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which originates when the list parameter in the SetIpMacBind function does not properly validate data boundaries when performing operations on memory, and can be exploit...

Tenda AC6 setstaticroutecfg function stack overflow vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 setstaticroutecfg function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Buffer Overflow Vulnerability (CNVD-2022-26244)

Tenda AC9 is a wireless router from Tenda, China.Tenda AC9 version 15.03.2.21 is vulnerable to a buffer overflow vulnerability, which stems from the list parameter in the SetStaticRoutecfg function that does not properly validate data boundaries when performing operations on memory, and can be...

Tenda AC6 openSchedWifi function stack overflow vulnerability (CNVD-2022-23519)

The Tenda AC6 is a wireless router. A buffer overflow vulnerability exists in Tenda AC6 v15.03.05.09multi, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 openSchedWifi function stack overflow vulnerability (CNVD-2022-23520)

The Tenda AC6 is a wireless router. A stack overflow vulnerability exists in the Tenda AC6 openSchedWifi function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC6 saveParentControlInfo function stack overflow vulnerability (CNVD-2022-24437)

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 saveParentControlInfo function, which can be exploited by an attacker to cause arbitrary command execution...

Tenda AC9 Command Injection Vulnerability (CNVD-2022-26245)

Tenda AC9 is a wireless router from Tenda, China.A command injection vulnerability exists in Tenda AC9 version 15.03.2.21, which stems from the failure of the vlanid parameter in the SetIPTVCfg function to properly filter the special elements of the construction snippet, which can be exploited to...

Tenda AC6 SetVirtualServerCfg Function Stack Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda AC6 SetVirtualServerCfg function, which can be exploited by an attacker to cause arbitrary command execution...