CVE-2025-4860: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137ALLen20210528. Affected is an unknown function of the file /advdhcps.php of the component Static Pool Settings Page. The manipulation of the argument fmac leads to cross site scripting. It is possible to launch...

D-Link DAP-2695 has a code injection vulnerability

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China's AUO D-Link. The D-Link DAP-2695 suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the parameter harpmac in the file...

Tenda DAP-1520 mod_graph_auth_uri_handler function buffer overflow vulnerability

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability that originates from the failure of the modgraphauthurihandler function in file/storage to properly validate the length of the input data, which could be exploited...

Tenda DAP-1520 set_ws_action function buffer overflow vulnerability

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability, which originates from the failure of the function setwsaction in the file /dws/api to correctly validate the length of the input data, which can be exploited by a...

Tenda DAP-1520 check_dws_cookie function buffer overflow vulnerability

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability, which originates from the function checkdwscookie in file/storage failing to correctly validate the length and size of the input data, which can be exploited by a...

CVE-2025-4356

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4354

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4355

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4356

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4356

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4354

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4355

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4355

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4354

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4356 Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4356 Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4356

CVE-2025-4356 affects Tenda DAP-1520 (firmware 1.10B04_BETA02). The vulnerability is a stack-based buffer overflow in the mod_graph_auth_uri_handler function under /storage of the Authentication Handler, caused by improper input length validation. It can be triggered remotely and has public explo...

CVE-2025-4355

CVE-2025-4355 affects Tenda DAP-1520, specifically the function set_ws_action in the file /dws/api/. The root cause is a heap-based buffer overflow in set_ws_action, which can be triggered remotely. Public references (CNVD, NVD, Red Hat CVE pages, and PTSecurity) describe the vulnerability as all...

CVE-2025-4355 Tenda DAP-1520 api set_ws_action heap-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4355 Tenda DAP-1520 api set_ws_action heap-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...