CVE-2025-22905

RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp...

CVE-2025-22905

The EDIMAX RE11S router, specifically version 1.11 , is vulnerable to a command injection flaw. The issue resides in the command parameter of the /goform/mp API endpoint, which may allow for unauthorized command execution. While no specific patch version is provided, the recommended workaround is...

PT-2025-3545 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8v4 version V16.03.34.06 Description: The issue is a stack overflow vulnerability affecting the setSchedWifi function in the /goform/openSchedWifi file. This vulnerability is caused by the manipulation of the schedEndTime argument,...

PT-2025-3546

Name of the Vulnerable Software and Affected Versions Tenda AC8v4 version 16.03.34.06 Description The issue is related to a stack overflow vulnerability. It affects the setSchedWifi function of the file /goform/openSchedWifi. The manipulation of the schedStartTime argument leads to a stack-based...

EDIMAX RE11S 安全漏洞

EDIMAX RE11S is a router from EDIMAX. A security vulnerability exists in EDIMAX RE11S v1.11, which stems from the discovery that the L2TPUserName parameter via /goform/setWAN contains a command injection vulnerability...

EDIMAX RE11S 安全漏洞

EDIMAX RE11S is a router from EDIMAX. A security vulnerability exists in EDIMAX RE11S v1.11, which stems from the discovery that the command parameter via /goform/mp contains a command injection vulnerability...

Tenda AC9 安全漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability, which originated when /goform/SetSambaCfg was found to contain a command injection vulnerability. An attacker can exploit this vulnerability to remotely execute arbitrary co...

CVE-2025-22949: Improper Neutralization of Special Elements used in a Command

Tenda ac9 v1.0 firmware v15.03.05.19 is vulnerable to command injection in /goform/SetSambaCfg, which may lead to remote arbitrary code execution...

CVE-2025-22946: Buffer Copy without Checking Size of Input

Tenda ac9 v1.0 firmware v15.03.05.19 contains a stack overflow vulnerability in /goform/SetOnlineDevName, which may lead to remote arbitrary code execution...

PT-2025-3844

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 Description A critical issue has been found in the function GetParentControlInfo of the file "/goform/GetParentControlInfo". The manipulation of the argument src leads to a stack-based buffer overflow. It is...

CVE-2024-13105: Improper Access Control

A vulnerability has been found in D-Link DIR-816 A2 1.10CNB05R1B011D88210 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/form2Dhcpd.cgi of the component DHCPD Setting Handler. The manipulation leads to improper access controls. The attac...

CVE-2024-13104: Improper Access Control

A vulnerability, which was classified as critical, was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. Affected is an unknown function of the file /goform/form2AdvanceSetup.cgi of the component WiFi Settings Handler. The manipulation leads to improper access controls. It is possible to launch t...

D-Link DIR-816 A2 安全漏洞

The D-Link DIR-816 A2 is a wireless router from China's AUO D-Link. An access control error vulnerability exists in D-Link DIR-816 A2 version 1.10CNB05R1B011D88210, which stems from improper access control in /goform/form2Dhcpd.cgi. An attacker can exploit this vulnerability to be able to set up...

CVE-2024-13103: Improper Access Control

A vulnerability, which was classified as critical, has been found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. This issue affects some unknown processing of the file /goform/form2AddVrtsrv.cgi of the component Virtual Service Handler. The manipulation leads to improper access controls. The attack...

CVE-2024-13108: Improper Access Control

A vulnerability was found in D-Link DIR-816 A2 1.10CNB05R1B011D88210. It has been declared as critical. This vulnerability affects unknown code of the file /goform/form2NetSniper.cgi. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been...

PT-2025-13679

Name of the Vulnerable Software and Affected Versions Tenda FH1202 version 1.2.0.14408 Description A critical issue affects the Web Management Interface component, specifically the /goform/AdvSetWrl file, leading to improper access controls. The issue can be exploited remotely. Recommendations Fo...

CVE-2024-11960

A vulnerability was found in D-Link DIR-605L 2.13B01. It has been declared as critical. This vulnerability affects the function formSetPortTr of the file /goform/formSetPortTr. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The exploit has...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-605L version 2.13B01, which originates from a buffer overflow in the parameter curTime in file /goform/formSetPortTr...

D-Link DIR-605L 安全漏洞

The D-Link DIR-605L is a wireless router from D-Link that supports a variety of network connections and security settings. The D-Link DIR-605L suffers from a buffer overflow vulnerability that originates in the file /goform/formResetStatistic parameter curTime, no details of the vulnerability are...

PT-2024-8867 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version 16.03.34.09 Description: A critical issue affects the route static check function of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to a stack-based buffer overflow. This issue can be exploit...