3669 matches found
CVE-2025-2995: Improper Access Control
A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. This vulnerability affects unknown code of the file /goform/SysToolChangePwd of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely...
CVE-2025-2991: Improper Access Control
A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is an unknown function of the file /goform/AdvSetWrlmacfilter of the component Web Management Interface. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Th...
PT-2025-13681
Name of the Vulnerable Software and Affected Versions Tenda FH1202 version 1.2.0.14408 Description A critical issue affects the Web Management Interface of the Tenda FH1202, specifically the file "/goform/AdvSetWrlGstset". This issue leads to improper access controls and can be exploited remotely...
CVE-2025-29635: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in D-Link DIR-823X 240126 and 240802 allows an authorized attacker to execute arbitrary commands on remote devices by sending a POST request to /goform/setprohibiting via the corresponding function, triggering remote command execution...
CVE-2025-29217
Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2025-29215
Tenda AX12 v22.03.01.46CN was discovered to contain a stack overflow via the sub43fdcc function at /goform/SetNetControlList...
CVE-2025-29121
A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fastsettingwifiset file formfastsettingwifiset. Using the timeZone parameter causes a stack-based buffer overflow...
CVE-2025-2549
A vulnerability has been found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/formSetPassword. The manipulation leads to improper access controls. The attack needs to be done within the local...
Tenda AC6 安全漏洞
The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the timeZone parameter in the /goform/fastsettingwifiset file that fails to properly validate the length of the input data, which can be exploited by ...
CVE-2025-2547: Improper Access Control
A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can only be done within the local network. T...
PT-2025-12363
Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.46 CN Description A stack overflow issue was discovered in Tenda AX12 via the sub 43fdcc function at the "/goform/SetNetControlList" API endpoint. Recommendations As a temporary workaround, consider disabling the su...
PT-2025-12356
Name of the Vulnerable Software and Affected Versions Tenda AX12 version 22.03.01.46 CN Description A stack overflow issue was discovered in the sub 42F69C function at the "/goform/setMacFilterCfg" API endpoint. This issue can be exploited, potentially leading to unintended consequences...
CVE-2025-29218: Stack-based Buffer Overflow
Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
Tenda W18E 安全漏洞
The Tenda W18E is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W18E /goform/setModules handling of the wifiPwd parameter, which can be exploited by an attacker to submit a special request that can crash the application and cause a denial of...
D-Link DIR-605L和D-Link DIR-618 安全漏洞
The D-Link DIR-605L and D-Link DIR-618 are both a wireless router from China-based AUO D-Link. An Access Control Error vulnerability exists in the D-Link DIR-605L version 3.02 and the D-Link DIR-618 version 2.02, which stems from improper access control in the file /goform/formAdvNetwork, and can...
D-Link DIR-605L和D-Link DIR-618 安全漏洞
The D-Link DIR-605L and D-Link DIR-618 are both a wireless router from China-based AUO D-Link. An Access Control Error vulnerability exists in the D-Link DIR-605L and D-Link DIR-618 that stems from improper access control of the file /goform/formVirtualServ, which can be exploited by an attacker ...
CVE-2025-2550: Improper Access Control
A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack needs to be initiate...
PT-2025-12369
Name of the Vulnerable Software and Affected Versions Tenda W18E version 2.0 v16.01.0.11 Description A stack overflow was discovered in the wifiPwd parameter at the /goform/setModules API endpoint. This issue allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2025-2546: Improper Access Control
A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within...