CVE-2025-10442

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...

CVE-2025-10442

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...

CVE-2025-10442 Tenda AC9/AC15 exeCommand formexeCommand os command injection

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...

CVE-2025-10442

CVE-2025-10442 affects Tenda AC9 and AC15 with firmware 15.03.05.14. The vulnerability is in the function formexeCommand of /goform/exeCommand, where unsanitized cmdinput leads to OS command injection. Remote exploitation is possible and the exploit has been publicly disclosed. Affected devices c...

CVE-2025-10442 Tenda AC9/AC15 exeCommand formexeCommand os command injection

A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...

Tenda AC9和Tenda AC15 操作系统命令注入漏洞

The Tenda AC9 and Tenda AC15 are both wireless routers from Tenda, a Chinese company. An OS command injection vulnerability exists in Tenda AC9 and Tenda AC15 version 15.03.05.14. The vulnerability stems from the incorrect operation of the function formexeCommand in the file /goform/exeCommand on...

Tenda AC9和Tenda AC15 安全漏洞

The Tenda AC9 and Tenda AC15 are both wireless routers from Tenda China. A security vulnerability exists in Tenda AC9 and Tenda AC15 versions 15.03.05.14 and 15.03.05.18, which originates from an incorrect manipulation of the parameter cmdinput in the file /goform/exeCommand, which could result i...

PT-2025-37472

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 15.03.05.14 Tenda AC9 version 15.03.05.18 Tenda AC15 version 15.03.05.14 Tenda AC15 version 15.03.05.18 Description: A vulnerability exists in Tenda AC9 and AC15 devices. The vulnerability affects the formexeCommand function...

CVE-2025-10385 Mercury KM08-708H GiGA WiFi Wave2 mcr_setSysAdm sub_450B2C buffer overflow

A vulnerability has been found in Mercury KM08-708H GiGA WiFi Wave2 1.1. Affected by this issue is the function sub450B2C of the file /goform/mcrsetSysAdm. The manipulation of the argument ChgUserId leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-10401: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diagping. Performing manipulation of the argument targetaddr results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may...

The vulnerability of the /goform/setQoS component of the Tenda F3 wireless router’s microprogramming software allows a attacker to execute arbitrary code.

The vulnerability of the /goform/setQoS component of the Tenda F3 wireless router’s microprogramming software lies in the copying of buffers without checking the size of the input data during the processing of the QosList parameter. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the /goform/setNAT module in the Tenda F3 wireless router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/setNAT module in the microprogramming software for Tenda F3 wireless routers lies in the copying of buffers without checking the size of the input data during the processing of the portList parameter. Exploiting this vulnerability allows a remote attacker to execu...

CVE-2025-57570

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS...

CVE-2025-57573

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi...

CVE-2025-57571

Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow. via the macFilterList parameter in goform/setNAT...

Tenda F3 goform/setNAT file portList parameter buffer overflow vulnerability

Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability, which stems from the /goform/setNAT file portList parameter failing to properly validate the length size of the input data, which can be...

Tenda F3 macFilterList Parameter Buffer Overflow Vulnerability

Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability, which stems from the goform/setNAT file macFilterList parameter failing to properly validate the length size of the input data, which can be...

Tenda F3 goform/setParentControl file buffer overflow vulnerability

Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability, which stems from the goform/setParentControl file failing to properly validate the length size of input data, which can be exploited by an...

Tenda F3 goform/setWifi file buffer overflow vulnerability

Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability that originates from the goform/setWifi file failing to properly validate the length size of the input data, which can be exploited by an...

PT-2025-39419

Name of the Vulnerable Software and Affected Versions UTT versions 3.0.0-170831 through 3.2.2-200710 Description A security issue exists in UTT 1200GW and 1250GW. The vulnerability is due to a buffer overflow in the file /goform/formApMail. The senderEmail argument can be manipulated to trigger...