3669 matches found
PT-2023-19453
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description The issue is related to a Buffer Overflow that can be triggered via the "/goform/initIpAddrInfo" API endpoint. Recommendations For Tenda AC18 version 15.03.05.19, consider restricting access to the...
PT-2023-19452
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description The issue is related to a Buffer Overflow that can be triggered via the "/goform/FUN 000c2318" API endpoint. Recommendations For Tenda AC18 version 15.03.05.19, consider restricting access to the...
PT-2023-19458
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description The issue is related to a Buffer Overflow that can be triggered via the "/goform/fromSetWirelessRepeat" API endpoint. This allows for potential exploitation. Recommendations For Tenda AC18 version...
PT-2023-19454
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description The issue is related to a Buffer Overflow that can be triggered via the "/goform/formWifiBasicSet" API endpoint. This allows for potential exploitation. Recommendations For Tenda AC18 version...
CVE-2023-24165: Out-of-bounds Write
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/initIpAddrInfo...
CVE-2023-24166: Out-of-bounds Write
Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via /goform/formWifiBasicSet...
PT-2023-3370
Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description A stack overflow issue was discovered in the D-Link N300 WI-FI Router DIR-605L, related to the webpage parameter at "/goform/formSetWanDhcpplus". This issue is associated with a...
PT-2023-1489
Name of the Vulnerable Software and Affected Versions D-Link N300 WI-FI Router DIR-605L version 2.13B01 Description The issue is caused by a stack overflow via the webpage parameter at "/goform/formWPS". This can allow a remote attacker to execute arbitrary code. Recommendations For D-Link N300...
CVE-2022-44149
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required...
CVE-2022-44149
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required...
CVE-2022-44149: Improper Neutralization of Special Elements used in an OS Command
The web service on Nexxt Amp300 ARN02304U8 42.103.1.5095 and 80.103.2.5045 devices allows remote OS command execution by placing &telnetd in the JSON host field to the ping feature of the goform/sysTools component. Authentication is required...
PT-2023-14431
Name of the Vulnerable Software and Affected Versions: Nexxt Amp300 ARN02304U8 version 42.103.1.5095 Nexxt Amp300 ARN02304U8 version 80.103.2.5045 Description: The web service on Nexxt Amp300 ARN02304U8 devices allows remote OS command execution by placing in the JSON host field to the "ping"...
Tenda A15 wepauth parameter stack overflow vulnerability
Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wepauth parameter, which stems from a lack of length checking of input data in the wepauth parameter of /goform/WifiBasicSet, and can be exploited by attackers to execute arbitrary code on the...
Tenda A15 wepkey parameter stack overflow vulnerability
Tenda A15 is a WiFi extender from Tenda, a Chinese company. A stack overflow vulnerability exists in the Tenda A15 wepkey parameter, which originates from the lack of length checking of input data in the wepkey parameter of /goform/WifiBasicSet, and can be exploited by an attacker to execute...
Tenda A15 ssid parameter stack overflow vulnerability
Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 ssid parameter, which stems from a lack of length checking of input data in the ssid parameter of /goform/WifiBasicSet, and can be exploited by attackers to execute arbitrary code on the system...
Tenda A15 wepkey1 parameter stack overflow vulnerability
Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wepkey1 parameter, which stems from a lack of length checking of input data in the wepkey1 parameter of /goform/WifiBasicSet, and can be exploited by attackers to execute arbitrary code on the...
CVE-2022-47120
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security5g parameter at /goform/WifiBasicSet...
CVE-2022-47122
Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd5g parameter at /goform/WifiBasicSet...