CVE-2025-4354 Tenda DAP-1520 storage check_dws_cookie stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4354 Tenda DAP-1520 storage check_dws_cookie stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4354

CVE-2025-4354 affects Tenda DAP-1520, version 1.10B04_BETA02. The vulnerability occurs in the function check_dws_cookie (file/storage) due to improper length/size validation, leading to a stack-based buffer overflow. Remote attacker access is possible, and the exploit has been disclosed publicly....

Tenda DAP-1520 security vulnerabilities

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability, which originates from the failure of the function setwsaction in the file /dws/api to correctly validate the length of the input data, which can be exploited by a...

PT-2025-19945 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical vulnerability has been found, affecting the mod graph auth uri handler function of the Authentication Handler component. This issue leads to a stack-based buffer overflow and can b...

CVE-2025-4355: Heap-based Buffer Overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

Tenda DAP-1520 security vulnerabilities

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability that originates from the failure of the modgraphauthurihandler function in file/storage to properly validate the length of the input data, which could be exploited...

PT-2025-19944 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical issue has been found, affecting the set ws action function of the /dws/api/ file, leading to a heap-based buffer overflow. This can be initiated remotely. Recommendations: For Tend...

CVE-2025-4356: Stack-based Buffer Overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

PT-2025-19943 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical issue was found, affecting the check dws cookie function of the file /storage. This issue leads to a stack-based buffer overflow. The attack can be launched remotely...

CVE-2025-4354: Stack-based Buffer Overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

D-Link DAP-1562 HTTP Header Handler Buffer Overflow

The vulnerability of the HTTP Header Handler component in the httprequestparse function of the D-Link DAP-1562 wireless access point’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2025-2840

CVE-2025-2840 affects the DAP to Autoresponders Email Syncing plugin for WordPress. The vulnerability is an unauthenticated information exposure through the publicly accessible phpinfo.php script, enabling anyone to view potentially sensitive information from the exposed file. The Wordfence entry...

CVE-2025-2840 DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure

The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information...

WordPress plugin DAP has a vulnerability related to email synchronization with autoresponders.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. An information disclosure...

CVE-2025-2840: Exposure of Sensitive Information to an Unauthorized Actor

The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information...

PT-2025-13605

Name of the Vulnerable Software and Affected Versions DAP to Autoresponders Email Syncing plugin for WordPress versions 1.0 and earlier Description The issue allows unauthenticated attackers to view potentially sensitive information through the publicly accessible phpinfo.php script. This makes i...

D-Link DAP-1620 Stack Buffer Overflow Vulnerability

The D-Link DAP-1620 is a wireless repeater extender from D-Link. The D-Link DAP-1620 suffers from a stack buffer overflow vulnerability. The vulnerability stems from improper handling of the parameter uid and can be exploited by an attacker to trigger a denial of service or execute malicious code...

D-Link DAP-1620 set_ws_action function buffer overflow vulnerability

The D-Link DAP-1620 is a wireless repeater extender from D-Link. The D-Link DAP-1620 suffers from a buffer overflow vulnerability that stems from the Path component's setwsaction function failing to properly validate the length of the input data, which could be exploited by an attacker to execute...

D-Link DAP-1620 mod_graph_auth_uri_handler function stack buffer overflow vulnerability

The D-Link DAP-1620 is a wireless repeater extender from D-Link. A stack buffer overflow vulnerability exists in the D-Link DAP-1620 modgraphauthurihandler function, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...