CVE-2025-5855 Tenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow

A vulnerability, which was classified as critical, was found in Tenda AC6 15.03.05.16. This affects the function formSetRebootTimer of the file /goform/SetRebootTimer. The manipulation of the argument rebootTime leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

CVE-2025-5849

creationtimestamp| type| source ---|---|--- 2025-06-09 01:18:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr57i2dpdn2s...

CVE-2025-5854 Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2025-5854 Tenda AC6 AdvSetLanip fromadvsetlanip buffer overflow

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack may be launched remotely. The exploit h...

CVE-2025-49619

Skyvern through 0.1.85 is vulnerable to server-side template injection SSTI in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to...

CVE-2025-5852

CVE-2025-5852 affects Tenda AC6 15.03.05.16. The vulnerability is in the function formSetPPTPUserList in /goform/setPptpUserList, where manipulating the list argument leads to a buffer overflow. This can be exploited remotely (attack vector: network) and has public disclosure (exploit maturity: p...

CVE-2025-29627

An issue in KeeperChat IOS Application v.5.8.8 allows a physically proximate attacker to escalate privileges via the Biometric Authentication Module...

CVE-2025-5848

creationtimestamp| type| source ---|---|--- 2025-06-08 23:01:03+00:00| published-proof-of-concept| Telegram/zw2BSkp-Ym0oCvBFZDIlQeX8xwHK1nK-jjrzwqXLyUsxBM 2025-06-08 23:54:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr52rvojk42m...

CVE-2025-35008

The CVE-2025-35008 entry concerns Microhard BulletLTE-NA2 and IPn4Gii-NA2 devices affected by a post-authentication command injection in the AT+MMNAME command (CWE-88). Affected component: AT command handling in these gateways; root cause: improper neutralization of argument delimiters leading to...

CVE-2025-35004

The CVE-2025-35004 entry applies to Microhard BulletLTE-NA2 and IPn4Gii-NA2. It describes a post-authentication command-injection vulnerability in the AT+MFIP command, categorized as CWE-88 (Argument Injection) that can lead to privilege escalation. Underlying cause: improper neutralization of ar...

CVE-2025-29871

An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later...

CVE-2025-33035

A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-27563

creationtimestamp| type| source ---|---|--- 2025-06-08 15:32:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr46pjiwfo2e...

CVE-2025-25217

creationtimestamp| type| source ---|---|--- 2025-06-08 15:27:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr46gkzc522p...

CVE-2025-38004

creationtimestamp| type| source ---|---|--- 2025-06-08 15:19:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr45y6grjr2u...

CVE-2025-27531

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the...

CVE-2025-41646

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device...

CVE-2025-5847 Tenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow

A vulnerability has been found in Tenda AC9 15.03.02.13 and classified as critical. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based...

CVE-2025-30629

Cross-Site Request Forgery CSRF vulnerability in Codehaveli Bitly URL Shortener codehaveli-bitly-url-shortener allows Cross Site Request Forgery.This issue affects Bitly URL Shortener: from n/a through = 1.4.1...

CVE-2025-30952

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpdive Nexa Blocks nexa-blocks allows Stored XSS.This issue affects Nexa Blocks: from n/a through = 1.1.0...