4400 matches found
CVE-2025-55583
D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...
PT-2025-35129
Name of the Vulnerable Software and Affected Versions Tenda AC10 version 4.0 firmware 16.03.10.20 Description The Tenda AC10 device contains a stack overflow issue via the get parentControl list Info function. Recommendations At the moment, there is no information about a newer version that...
CVE-2025-57219
Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 allows attackers to escalate privileges or access sensitive components via a crafted request...
CVE-2025-57219
The CVE-2025-57219 vulnerability affects Tenda AC10 v4.0 firmware (16.03.10.09_multi_TDE01). The root cause is improper access control on the /goform/ate endpoint, enabling an attacker to escalate privileges or access sensitive components via a crafted request. Exploit details, affected versions ...
PT-2025-35126
Name of the Vulnerable Software and Affected Versions Tenda AC10 version 4.0 firmware 16.03.10.09 multi TDE01 Description Incorrect access control in the /goform/ate endpoint allows attackers to escalate privileges or access sensitive components via a crafted request. Recommendations At the momen...
CVE-2025-55583
D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...
PT-2025-35119
Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.09 multi TDE01 Description: The Tenda AC10 firmware contains a stack overflow issue. This occurs through the security 5g parameter within the sub 46284C function. Recommendations: Update to a newer version of the...
CVE-2025-57218
Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the security5g parameter in the function sub46284C...
CVE-2025-57217
Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...
CVE-2025-57215
Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function getparentControllistInfo...
CVE-2025-57217
Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...
CVE-2025-57218
Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the security5g parameter in the function sub46284C...
CVE-2025-9526
A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation of the argument rmport leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the...
CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow
A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...
Linksys E1700 安全漏洞
The Linksys E1700 is a wireless router from Linksys, USA. A security vulnerability exists in Linksys E1700 version 1.0.0.4.003, which originates from a stack buffer overflow due to incorrect manipulation of parameter rmport in file /goform/setSysAdm...
CVE-2025-55582
D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script mydlink-watch-dog.sh, which blindly respawns binaries such as dcp and signalc without verifying integrity, authenticity, or permissions. An attacker with local filesystem access via physical access, firmware...
CVE-2025-29523
D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...
CVE-2025-29521
Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attack...