Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability, which originates from the /goform/WizardHandle file not performing effective boundary checking...

PT-2025-39788

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A buffer overflow issue exists in the formWrlExtraGet function of the /goform/GstDhcpSetSer file. Manipulation of the dips argument can trigger this issue, allowing for remote exploitation. A public explo...

CVE-2025-10942 H3C Magic B3 aspForm EditMacList buffer overflow

A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. T...

CVE-2025-10942

CVE-2025-10942 affects H3C Magic B3 up to version 100R002. The vulnerability lies in AddMacList/EditMacList in /goform/aspForm, where manipulation of the param argument can cause a buffer overflow and enable remote exploitation. Public PoCs exist. Reports indicate the vendor did not respond to di...

H3C Magic B3 安全漏洞

H3C Magic B3 is a wireless router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic B3 100R002 and prior versions, which stems from incorrect manipulation of parameter param of function AddMacList in file/goform/aspForm, which could result in a buffer overflow...

PT-2025-39361

Name of the Vulnerable Software and Affected Versions H3C Magic B3 versions up to 100R002 Description A flaw exists in H3C Magic B3 that allows for remote buffer overflow. The issue is related to the AddMacList function within the /goform/aspForm file. Manipulation of the param argument can trigg...

CVE-2025-10953: Buffer Copy without Checking Size of Input

A security vulnerability has been detected in UTT 1200GW and 1250GW up to 3.0.0-170831/3.2.2-200710. This vulnerability affects unknown code of the file /goform/formApMail. The manipulation of the argument senderEmail leads to buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2025-10792

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

The vulnerability of the formWPS function in the /goform/formWPS file of the D-Link DIR-513 router’s microprogramming software allows a intruder to cause a service failure.

The vulnerability of the formWPS function in the /goform/formWPS module of the D-Link DIR-513 router’s microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the webpage parameter. Exploiting this vulnerability allows a...

The vulnerability of the sub_415028 function in the goform/set_static_leases file of the microprogramming software for the D-Link DIR-823X router allows a hacker to execute arbitrary commands.

The vulnerability of the sub415028 function in the goform/setstaticleases module of the D-Link DIR-823X router software is related to the lack of data cleaning measures at the management level when processing the Hostname parameter. Exploiting this vulnerability allows an attacker to execute...

CVE-2025-10838 Tenda AC21 WifiExtraSet sub_45BB10 buffer overflow

A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...

PT-2025-40815

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A buffer overflow issue exists in Belkin F9K1015. The issue is located in an unknown function within the /goform/formWanTcpipSetup file. Manipulation of the pppUserName argument can trigger the...

PT-2025-40819

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A flaw exists in Belkin F9K1015 version 1.00.10 where manipulation of the command argument in the file /goform/mp can lead to command injection. This issue may be exploited remotely. The exploit is...

PT-2025-40818

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A security issue exists in Belkin F9K1015 version 1.00.10. The issue involves a buffer overflow that can be triggered remotely by manipulating the pinCode argument in the /goform/formWpsStart function...

PT-2025-40816

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A security flaw exists in Belkin F9K1015 version 1.00.10. The issue involves a buffer overflow in an unknown function within the /goform/formWlanMP file. The ateFunc argument can be manipulated to...

CVE-2025-10838: Buffer Copy without Checking Size of Input

A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and...

CVE-2025-10815

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. The attack can be launched remotely. T...

CVE-2025-10792

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...

CVE-2025-10792

D-Link DIR-513 A1FW110 is affected by a buffer overflow in the /goform/formWPS function caused by manipulation of the webpage argument. The issue can be exploited remotely and is considered high severity (CVSS ~8.8). Several sources confirm the vulnerability and remote feasibility, with exploit m...

CVE-2025-10792 D-Link DIR-513 formWPS buffer overflow

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /goform/formWPS. Such manipulation of the argument webpage leads to buffer overflow. The attack may be performed from remote. The exploit has been disclosed publicly and may be used...