PT-2025-9583

Name of the Vulnerable Software and Affected Versions Tenda TX3 version 16.03.13.11 multi Description A critical issue has been found in the /goform/setPptpUserList file, affecting an unknown functionality. The manipulation of the argument list leads to a buffer overflow. This issue can be...

CVE-2025-1819

A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lanip leads to os command injection. It is possible to launch the attack remotely. The exploit has been...

Tenda AC7 命令注入漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44. The vulnerability stems from the TendaTelnet function in the /goform/telnet file failing to properly filter constructor command special characters, commands, et...

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from China's Tenda Tenda in 2016. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from some unknown features of /goform/WifiExtraSet, and can be exploited by an attacker to execute arbitrary code by manipulating the parameter...

PT-2025-9255

Name of the Vulnerable Software and Affected Versions Tenda AC8 version 16.03.34.06 Description A critical issue affects the function sub 49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to a stack-based buffer overflow. The...

CVE-2025-1814: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be launched remotel...

PT-2025-8982

Name of the Vulnerable Software and Affected Versions Tuoshi/Dionlink LT15D 4G Wi-Fi devices version M7628NNxlSPv2xUI v1.0.1802.10.08 P4 Tuoshi/Dionlink LT21B devices version M7628xUSAxUIv2 v1.0.1481.15.02 P0 Description An issue allows a remote attacker with network access to exploit a command...

PT-2025-11284

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the cloneType parameter of the "/goform/AdvSetMacMtuWan" API endpoint, which can lead to remote arbitrary code execution...

PT-2025-11285

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the mac parameter of the "/goform/AdvSetMacMtuWan" API endpoint. This vulnerability can lead to remote arbitrary code execution...

PT-2025-11283

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the wanMTU parameter of the "/goform/AdvSetMacMtuWan" API endpoint. This vulnerability can lead to remote arbitrary code execution...

PT-2025-11286

Name of the Vulnerable Software and Affected Versions: Tenda AC9 version 1.0 V15.03.05.14 multi Description: The issue is related to a stack overflow vulnerability in the wanSpeed parameter of the "/goform/AdvSetMacMtuWan" API endpoint. This vulnerability can lead to remote arbitrary code...

Tuoshi LT15D 安全漏洞

Tuoshi LT15D is a wireless router from China's Tuoshi Tuoshi. A security vulnerability exists in the Tuoshi LT15D that originates from the /goform/formJsonAjaxReq endpoint that does not clean up shell metacharacters, allowing an unauthenticated, remote attacker to execute arbitrary OS commands...

CVE-2024-53944: Improper Control of Generation of Code

An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUIv1.0.1802.10.08P4 and LT21B devices through M7628xUSAxUIv2v1.0.1481.15.02P0. A unauthenticated remote attacker with network access can exploit a command injection vulnerability. The /goform/formJsonAjaxReq...

PT-2025-9185

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 Description A critical issue has been found in Tenda AC6, affecting some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the wpapsk crypto argument leads to a stack-based buffer overflo...

LB-LINK AC1900 命令注入漏洞

LB-LINK AC1900 is a wireless router from China Bilink LB-LINK. A command injection vulnerability exists in the LB-LINK AC1900 version 1.0.2, which originates from the parameter mac/enable in the file /goform/setblacklist that can lead to OS command injection...

LB-LINK AC1900 命令注入漏洞

The LB-LINK AC1900 is a wireless router from China Bilink LB-LINK. A command injection vulnerability exists in the LB-LINK AC1900 version 1.0.2, which originates from the file /goform/parameter cmd that can lead to operating system command injection...

PT-2025-7674

Name of the Vulnerable Software and Affected Versions LB-LINK AC1900 Router version 1.0.2 Description The issue concerns an os command injection vulnerability. It is related to the /goform/set cmd endpoint and the websGetVar variable. Recommendations For LB-LINK AC1900 Router version 1.0.2,...

PT-2025-7675

Name of the Vulnerable Software and Affected Versions LB-LINK AC1900 Router version 1.0.2 Description The issue concerns an os command injection vulnerability, specifically affecting the /goform/set blacklist endpoint, where the mac and enable variables are involved. Recommendations For LB-LINK...

PT-2025-7696

Name of the Vulnerable Software and Affected Versions LB-LINK AC1900 Router version 1.0.2 Description A critical issue was found in the function websGetVar of the file /goform/set manpwd. The manipulation of the argument routepwd leads to os command injection. It is possible to launch the attack...

PT-2025-7677

Name of the Vulnerable Software and Affected Versions FiberHome AN5506-01A ONU GPON RP2511 affected versions not specified Description The issue concerns a cross-site scripting problem in the URL Filtering Submenu, specifically affecting the "/goform/URL filterCfg" endpoint with the url IP...