Lucene search
+L

183 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/18 12:00 a.m.•8 views

The vulnerability of the formexeCommand() function in the Tenda W3 wireless access point software allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formexeCommand function in the Tenda W3 wireless access point software lies in the fact that the operation exceeds the buffer limits in memory when processing the cmdinput parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality,...

9CVSS8.5AI score0.01009EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2026/09/18 12:00 a.m.•6 views

The vulnerability of the fromexeCommand() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromexeCommand function in the Tenda F456 router’s microprogramming system is related to the execution of an operation outside the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

9CVSS8.9AI score0.00792EPSS
SaveExploits0References3Affected Software1
VulnCheck KEV
VulnCheck KEV
•added 2026/09/01 12:00 a.m.•14 views

VulnCheck KEV: CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

7.4CVSS6.8AI score0.02747EPSS
SaveIn wildExploits0References18
EUVD
EUVD
•added 2026/08/24 12:33 a.m.•15 views

EUVD-2026-64666

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

5.3CVSS7.4AI score0.02747EPSS
SaveExploits0References7
NVD
NVD
•added 2026/08/23 10:16 p.m.•25 views

CVE-2026-78141

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

7.4CVSS0.02747EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/08/23 9:45 p.m.•48 views

CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

7.4CVSS0.02747EPSS
SaveExploits0References6
CVE
CVE
•added 2026/08/23 9:45 p.m.•34 views

CVE-2026-78141

The Tenda CH22 router (version 1.0.0.1) contains a command injection vulnerability within the formexeCommand function of the /goform/exeCommand file. The root cause is the improper neutralization of special elements used in a command, specifically via the manipulation of the cmdinput argument. Th...

7.4CVSS7.1AI score0.02747EPSS
SaveIn wildExploits0References6
Vulnrichment
Vulnrichment
•added 2026/08/23 9:45 p.m.•11 views

CVE-2026-78141 Tenda CH22 exeCommand formexeCommand command injection

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

7.4CVSS7.1AI score0.02747EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/23 12:00 a.m.•0 views

CVE-2026-78141: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

7.4CVSS7.2AI score0.02747EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/23 12:00 a.m.•28 views

PT-2026-79783

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function formexeCommand of the file /goform/exeCommand. The manipulation of the argument cmdinput leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

7.4CVSS5.4AI score0.02747EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2026/06/26 12:00 a.m.•12 views

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda i3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda i3 wireless access point software is related to the operation that goes beyond the buffer in memory when processing the cmdinput parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...

9CVSS6.3AI score0.01009EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/04/16 7:22 p.m.•18 views

CVE-2026-6196

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and...

9CVSS6.3AI score0.00792EPSS
SaveExploits0References1
CNVD
CNVD
•added 2026/04/14 12:00 a.m.•6 views

Tenda F456 stack buffer overflow vulnerability (CNVD-2026-37071)

The Tenda F456 is a SOHO wireless router launched by Tenda. The Tenda F456 has a stack buffer overflow vulnerability, which stems from the failure of the fromexeCommand function in /goform/exeCommand to properly handle the cmdinput parameter. No detailed details about the vulnerability are...

9CVSS8.1AI score0.00792EPSS
SaveExploits0
EUVD
EUVD
•added 2026/04/13 6:30 p.m.•12 views

EUVD-2026-22055

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and...

9CVSS6.3AI score0.00792EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/04/13 5:45 p.m.•9 views

CVE-2026-6196 Tenda F456 exeCommand fromexeCommand stack-based overflow

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and...

9CVSS7.9AI score0.00792EPSS
SaveExploits0References5
CVE
CVE
•added 2026/04/13 5:45 p.m.•29 views

CVE-2026-6196

CVE-2026-6196 affects Tenda F456 firmware 1.0.0.5, where the function fromexeCommand in /goform/exeCommand is vulnerable to a stack-based buffer overflow when manipulating the cmdinput argument. This enables remote exploitation, with PoC/proof of concept exploit information publicly available. Th...

9CVSS6.3AI score0.00792EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2026/04/13 5:45 p.m.•9 views

CVE-2026-6196

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and...

9CVSS6.3AI score0.00792EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/13 12:00 a.m.•2 views

CVE-2026-6196: Stack-based Buffer Overflow

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and...

9CVSS8.4AI score0.00792EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/13 12:00 a.m.•16 views

Tenda F456 安全漏洞

The Tenda F456 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.5 of the Tenda F456 contains a security vulnerability. This vulnerability stems from an stack buffer overflow issue in the fromexeCommand function within the file /goform/exeCommand, which handles the cmdinpu...

9CVSS7.5AI score0.00792EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/04/13 12:00 a.m.•18 views

PT-2026-32499

A vulnerability was detected in Tenda F456 1.0.0.5. This affects the function fromexeCommand of the file /goform/exeCommand. Performing a manipulation of the argument cmdinput results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and...

9CVSS7.9AI score0.00792EPSS
SaveExploits0References9
Rows per page
Query Builder