CVE-2025-29357: Improper Resource Shutdown or Release

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

PT-2025-11180

Name of the Vulnerable Software and Affected Versions: Tenda RX3 US RX3V1.0br V16.03.13.11 multi TDE01 Description: The issue is related to a Buffer Overflow that can be triggered via the deviceId parameter at the "/goform/saveParentControlInfo" API endpoint. This allows attackers to cause a Deni...

CVE-2025-29360: Buffer Copy without Checking Size of Input

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

PT-2025-11179

Name of the Vulnerable Software and Affected Versions: Tenda RX3 US RX3V1.0br V16.03.13.11 multi TDE01 Description: The issue is related to a Buffer Overflow that can be triggered via the firewallEn parameter at the "/goform/SetFirewallCfg" API endpoint. This allows attackers to cause a Denial of...

PT-2025-11181

Name of the Vulnerable Software and Affected Versions: Tenda RX3 US RX3V1.0br V16.03.13.11 multi TDE01 Description: The issue is related to a Buffer Overflow that can be triggered via the time and timeZone parameters at the "/goform/SetSysTimeCfg" API endpoint. This allows attackers to cause a...

CVE-2025-29362: Buffer Copy without Checking Size of Input

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the list parameter at /goform/setPptpUserList. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-29359: Buffer Copy without Checking Size of Input

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the deviceId parameter at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

PT-2025-12719

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X versions 240126/240802 Description A critical issue has been found in the HTTP POST Request Handler component, specifically affecting the function sub 41710C of the file /goform/diag nslookup. The manipulation of the target add...

CVE-2025-25632

Tenda AC15 v15.03.05.19 is vulnerable to Command Injection via the handler function in /goform/telnet...

PT-2025-9856

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.19 Description A vulnerability has been found in the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src leads to a stack-based buffer overflow. Recommendatio...

CVE-2025-1895: Buffer Copy without Checking Size of Input

A vulnerability classified as critical has been found in Tenda TX3 16.03.13.11multi. This affects an unknown part of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclos...

CVE-2025-1899: Buffer Copy without Checking Size of Input

A vulnerability has been found in Tenda TX3 16.03.13.11multi and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack can be launched remotely. The exploit...

CVE-2025-1897: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in Tenda TX3 16.03.13.11multi. This issue affects some unknown processing of the file /goform/SetNetControlList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2025-1896: Buffer Copy without Checking Size of Input

A vulnerability classified as critical was found in Tenda TX3 16.03.13.11multi. This vulnerability affects unknown code of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to th...

PT-2025-9540

Name of the Vulnerable Software and Affected Versions Reprise License Manager version 14.2 Description The issue concerns reflected cross-site scripting. It can be exploited through the /goform/activate process API endpoint via the akey parameter. Recommendations For Reprise License Manager versi...

PT-2025-9581

Name of the Vulnerable Software and Affected Versions Tenda TX3 version 16.03.13.11 multi Description A critical issue has been found in the processing of the file /goform/SetNetControlList, where the manipulation of the list argument leads to a buffer overflow. This issue can be exploited...

CVE-2025-25939: Improper Neutralization of Input During Web Page Generation

Reprise License Manager 14.2 is vulnerable to reflected cross-site scripting in /goform/activateprocess via the akey parameter...

PT-2025-9582

Name of the Vulnerable Software and Affected Versions Tenda TX3 version 16.03.13.11 multi Description A critical vulnerability was found in the Tenda TX3, affecting an unknown function of the file /goform/openSchedWifi. The manipulation of the schedStartTime and schedEndTime arguments leads to a...

PT-2025-9579

Name of the Vulnerable Software and Affected Versions Tenda TX3 version 16.03.13.11 multi Description A critical issue has been discovered, affecting the /goform/setMacFilterCfg file. The deviceList argument is vulnerable to manipulation, leading to a buffer overflow. This issue can be exploited...

PT-2025-9580

Name of the Vulnerable Software and Affected Versions Tenda TX3 version 16.03.13.11 multi Description A critical issue was found, affecting the /goform/SetStaticRouteCfg file. The manipulation of the argument list leads to a buffer overflow. This issue can be initiated remotely. Recommendations F...