4400 matches found
CVE-2025-8937
A vulnerability has been found in TOTOLINK N350R 1.2.3-B20130826. This vulnerability affects unknown code of the file /boafrm/formSysCmd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
PT-2025-33608 · Tenda · Tenda Ac20
Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A security flaw has been discovered in Tenda AC20. The vulnerability affects an unknown functionality of the file /etc ro/shadow. Manipulation of this file leads to the disclosure of hard-coded...
PT-2025-33606 · Tenda · Tenda Ac20
Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A vulnerability exists in the sub 48E628 function of the /goform/SetIpMacBind file. Manipulation of the argument list leads to a stack-based buffer overflow, potentially allowing for remote...
CVE-2025-9026
CVE-2025-9026 affects D-Link DIR-860L (firmware 2.04.B04). The vulnerability is in the Simple Service Discovery Protocol component, specifically the ssdpcgi_main function in htdocs/cgibin, enabling remote OS command injection. Publicly disclosed exploit indicates active risk, with impact on confi...
CVE-2025-8762
A vulnerability was found in INSTAR 2K+ and 4K 3.11.1 Build 1124. This issue affects some unknown processing of the component UART Interface. The manipulation leads to improper physical access control. It is possible to launch the attack on the physical device. The exploit has been disclosed to t...
CVE-2025-50635
A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...
Tenda AC7和Tenda AC18 安全漏洞
Tenda AC7 and Tenda AC18 are both products of Tenda, a Chinese company.Tenda AC7 is a wireless router.Tenda AC18 is a router. A security vulnerability exists in Tenda AC7 and Tenda AC18 versions 15.03.05.19 and 15.03.06.44, which originates from a buffer overflow due to improper handling of the...
CVE-2025-8979 Tenda AC15 Firmware Update check_fw data authenticity
A vulnerability was identified in Tenda AC15 15.13.07.13. Affected by this vulnerability is the function checkfwtype/splitfireware/checkfw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. The attack can be launched remotely. The...
CVE-2025-8940
A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of the file /goform/saveParentControlInfo. The manipulation of the argument Time leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to t...
CVE-2025-8939
The CVE-2025-8939 issue affects Tenda AC20 routers (firmware versions up to 16.03.08.12) due to a buffer overflow in an unknown function that processes the shareSpeed argument in /goform/WifiGuestSet. This leads to remote code execution potential or denial of service, with the exploit disclosed p...
CVE-2025-8939 Tenda AC20 WifiGuestSet buffer overflow
A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/WifiGuestSet. The manipulation of the argument shareSpeed leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and ma...
CVE-2025-8937
A vulnerability has been found in TOTOLINK N350R 1.2.3-B20130826. This vulnerability affects unknown code of the file /boafrm/formSysCmd. The manipulation leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...
CVE-2025-51451
In TOTOLINK EX1200T firmware 4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm...
CVE-2025-51452
In TOTOLINK A7000R firmware 9.1.0u.6115B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm...
PT-2025-33010 · Netis · Netis Wf2880
Name of the Vulnerable Software and Affected Versions: Netis WF2880 version 2.1.40207 Description: A buffer overflow vulnerability exists in the Function 00465620 function of the cgitest.cgi file. Attackers can trigger this issue by controlling the specify parame variable within the payload,...
PT-2025-33019 · Totolink · Totolink Ex1200T
Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T firmware version 4.1.2cu.5215 Description: An attacker can bypass login by sending a specific request through the formLoginAuth.htm endpoint. Recommendations: Apply a firmware update that addresses this login bypass issue. As...
CVE-2025-50609
A vulnerability in Netis WF2880 v2.1.40207 affects the cgitest.cgi file (Function_00465620). The root cause is a buffer overflow when an attacker controls the specify_parame parameter in the payload, which can crash the process and potentially yield a Denial of Service. Connected sources corrobor...
CVE-2025-51452
In TOTOLINK A7000R firmware 9.1.0u.6115B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm...
PT-2025-33016 · Totolink · Totolink A7000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK A7000R firmware version 9.1.0u.6115 B20201022 Description: An attacker can bypass login by sending a specific request through the formLoginAuth.htm endpoint. Recommendations: Apply a configuration change to restrict access to the...