6500 matches found
CVE-2025-20096
Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege. System software adversary with a privileged user combined with a high complexity attack may enable data manipulation. This result may potentially occur via local access when...
CVE-2025-22850
Time-of-check time-of-use race condition in the UEFI PdaSmm module for some IntelR reference platforms may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
EUVD-2025-208541
Tenda G1V3.1si V16.01.7.8 Firmware V16.01.7.8 was discovered to contain a hardcoded password vulnerability in /etcro/shadow, which allows attackers to log in as root...
PT-2026-24495
Improper buffer restrictions in the UEFI DXE module for some IntelR Reference Platforms within UEFI may allow an information disclosure. System software adversary with a privileged user combined with a high complexity attack may enable data exposure. This result may potentially occur via local...
📄 Vivotek Camera Firmware OS 0125c Command Injection
Vivotek Camera Firmware OS versions 0100a through 0125c suffer from a command injection vulnerability. The issue resides in the CGI binary uploadmap.cgi, which operates under the Boa Webserver environment. The vulnerability occurs because the application improperly processes the POSTFILENAME...
UTT HiPER 810G 安全漏洞
UTT HiPER 810G is a firewall router produced by UTT Corporation. Versions of UTT HiPER 810G prior to 1.7.7-1711 contained security vulnerabilities. These vulnerabilities were caused by a buffer overflow vulnerability in the strcpy function found in the file/goform/getOneApConfTempEntry. This...
EUVD-2026-10232
A vulnerability was identified in Tenda F453 1.0.0.3/3.As. Impacted is the function fromPptpUserAdd of the file /goform/PPTPDClient. Such manipulation of the argument username/opttype leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and...
CVE-2026-3715 Wavlink WL-WN579X3-C firewall.cgi sub_40139C stack-based overflow
A vulnerability was found in Wavlink WL-WN579X3-C 231124. This affects the function sub40139C of the file /cgi-bin/firewall.cgi. Performing a manipulation of the argument delflag results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made publ...
PT-2026-23783
Name of the Vulnerable Software and Affected Versions XikeStor SKS8310-8X Network Switch firmware versions prior to 1.04.B07 Description The XikeStor SKS8310-8X Network Switch firmware contains a flaw related to session identifiers. A remote attacker can hijack authenticated sessions by predictin...
EUVD-2025-208286
Stack buffer overflow vulnerability in D-Link DIR-513 v1.10 via the curTime parameter to goform/formAdvNetwork...
CVE-2025-69765
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution...
CVE-2025-69765
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution...
CVE-2026-20430
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151...
CVE-2025-69765
Tenda AX3 firmware v16.03.12.11 contains a stack overflow in formGetIptv function and the list parameter, which can cause memory corruption and enable remote code execution...
CVE-2025-69765
CVE-2025-69765 : Tenda AX3 firmware v16.03.12.11 contains a stack overflow in the formGetIptv function and the list parameter, enabling memory corruption and remote code execution. Affected product: Tenda AX3 router. Root cause: stack overflow leading to RCE as described in multiple sources (NVD,...
CVE-2026-2584
CVE-2026-2584 describes a critical SQL injection in the authentication module of the Ciser System SL firmware. An unauthenticated, remote attacker can exploit the login interface by sending crafted SQL queries, with attack vector NETWORK and attack complexity LOW . The impact per metrics: total c...
EUVD-2026-9158
In wlan AP FW, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00467553; Issue ID: MSV-5151...
PT-2026-22599
Name of the Vulnerable Software and Affected Versions Tenda W20E version 4.0br V15.11.0.6 Description A buffer overflow issue exists in the Tenda W20E router firmware. Insufficient validation of the sizes of gstup and gstdwn before they are combined into gstruleQos can lead to a buffer overflow...