Lucene search
+L

3669 matches found

Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•38 views

PT-2026-21878

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A buffer overflow issue exists in the Tenda F453 router firmware. The flaw is located within the fromSetWifiGusetBasic function of the httpd component, specifically in the file /goform/AdvSetWrlsafeset...

9CVSS8.1AI score0.01048EPSS
SaveExploits2References26
Positive Technologies
Positive Technologies
•added 2026/02/25 12:00 a.m.•25 views

PT-2026-21880

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3 Description A buffer overflow issue exists in the fromRouteStatic function of the httpd component, specifically within the /goform/RouteStatic endpoint. Manipulation of the page argument in an HTTP request can trigge...

9CVSS7.3AI score0.01048EPSS
SaveExploits2References14
BDU FSTEC
BDU FSTEC
•added 2026/02/25 12:00 a.m.•17 views

The vulnerability of the function in the /goform/set_password file of D-link DIR-823X router microprogramming software allows a hacker to execute any command they desire.

The vulnerability of the /goform/setpassword function in the D-link DIR-823X router microprogramming system is related to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

9CVSS6.1AI score0.06355EPSS
SaveExploits1References8Affected Software1
CNNVD
CNNVD
•added 2026/02/25 12:00 a.m.•32 views

Tenda F453 安全漏洞

The Tenda F453 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.3 of the Tenda F453 contains a security vulnerability. This vulnerability stems from the improper handling of the parameter webSiteId by the formWebTypeLibrary function in the httpd component and the...

9CVSS7.5AI score0.01048EPSS
SaveExploits2References5
BDU FSTEC
BDU FSTEC
•added 2026/02/24 12:00 a.m.•23 views

The vulnerability of the strcpy() function (/goform/setSysAdm) in the UTT HiPER 840G router software allows a attacker to cause a service failure.

The vulnerability of the strcpy function /goform/setSysAdm in the UTT HiPER 840G router software is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

9CVSS6AI score0.01003EPSS
SaveExploits1References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/02/24 12:00 a.m.•17 views

The vulnerability of the /goform/getOneApConfTemp Entry function in the microprogramming software for network devices UTT HiPER 840G, which allows a intruder to trigger a service failure.

The vulnerability of the /goform/getOneApConfTemp Entry function in the microprogramming software for network devices UTT HiPER 840G is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service...

9CVSS5.9AI score0.00887EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•5 views

CVE-2026-3016: Buffer Copy without Checking Size of Input

A vulnerability was identified in UTT HiPER 810G up to 1.7.7-171114. The affected element is the function strcpy of the file /goform/formP2PLimitConfig. The manipulation of the argument except leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly availab...

9CVSS7.9AI score0.01048EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•9 views

CVE-2026-2980: Buffer Copy without Checking Size of Input

A vulnerability has been found in UTT HiPER 810G up to 1.7.7-1711. Impacted is the function strcpy of the file /goform/setSysAdm. The manipulation of the argument passwd1 leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

8.6CVSS7.3AI score0.0112EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/22 7:11 p.m.•29 views

CVE-2026-2870

A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function setqosMiblist of the file /goform/formSetQosBand. The manipulation of the argument list results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to th...

9CVSS8.7AI score0.01048EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/02/22 7:11 p.m.•30 views

CVE-2026-2874

A flaw has been found in Tenda A21 1.0.0.0. Impacted is the function formfastsettingwifiset of the file /goform/fastsettingwifiset. Executing a manipulation of the argument ssid can lead to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been published a...

9CVSS8.7AI score0.01048EPSS
SaveExploits1References1
OSV
OSV
•added 2026/02/22 4:15 a.m.•20 views

CVE-2026-2911

A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

8.8CVSS6AI score0.01048EPSS
SaveExploits1References5
CVE
CVE
•added 2026/02/22 3:02 a.m.•50 views

CVE-2026-2911

CVE-2026-2911 affects Tenda FH451 devices up to version 1.0.0.9. The issue relates to processing the file /goform/GstDhcpSetSer, causing a buffer overflow. Exploitation can be attempted remotely and/public exploit disclosures exist. Remediation: update to a version later than 1.0.0.9 (as noted in...

9CVSS7.9AI score0.01048EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/02/22 12:00 a.m.•44 views

PT-2026-21405

Name of the Vulnerable Software and Affected Versions UTT HiPER 810G version 1.7.7-171114 Description A buffer overflow issue exists in the strcpy function within the /goform/ConfigExceptAli file of UTT HiPER 810G version 1.7.7-171114. The strcpy function lacks bounds checking, allowing malicious...

9CVSS7.8AI score0.01048EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2026/02/22 12:00 a.m.•24 views

Tenda FH451 安全漏洞

The Tenda FH451 is a router produced by the Chinese company Tenda. Versions of the Tenda FH451 starting from 1.0.0.9 contain security vulnerabilities. These vulnerabilities stem from incorrect operations involving files like goform/GstDhcpSetSer, which may lead to buffer overflows...

9CVSS7.5AI score0.01048EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/22 12:00 a.m.•9 views

CVE-2026-2911: Buffer Copy without Checking Size of Input

A vulnerability has been found in Tenda FH451 up to 1.0.0.9. This issue affects some unknown processing of the file /goform/GstDhcpSetSer. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

9CVSS8AI score0.01048EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/02/21 2:32 p.m.•11 views

CVE-2026-2870

A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function setqosMiblist of the file /goform/formSetQosBand. The manipulation of the argument list results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to th...

9CVSS6.3AI score0.01048EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/21 12:00 a.m.•3 views

CVE-2026-2870: Stack-based Buffer Overflow

A security flaw has been discovered in Tenda A21 1.0.0.0. Affected by this issue is the function setqosMiblist of the file /goform/formSetQosBand. The manipulation of the argument list results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been released to th...

9CVSS8.4AI score0.01048EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/21 12:00 a.m.•2 views

CVE-2026-2877: Stack-based Buffer Overflow

A vulnerability has been found in Tenda A18 15.13.07.13. This affects the function strcpy of the file /goform/WifiExtraSet of the component Httpd Service. The manipulation of the argument wpapskcrypto5g leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

9CVSS8.3AI score0.00984EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/21 12:00 a.m.•2 views

CVE-2026-2876: Stack-based Buffer Overflow

A vulnerability was determined in Tenda A18 15.13.07.13. This affects the function parsemacfilterrule of the file /goform/setBlackRule. This manipulation of the argument deviceList causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed an...

9CVSS8.4AI score0.00984EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/02/21 12:00 a.m.•23 views

Tenda A21 安全漏洞

The Tenda A21 is a wireless signal extender produced by the Chinese company Tenda. Version 1.0.0.0 of the Tenda A21 contains a security vulnerability. This vulnerability stems from the formfastsettingwifiset function in the/goform/fastsettingwifiset file, where there is a stack buffer overflow du...

9CVSS7.5AI score0.01048EPSS
SaveExploits1References5
Rows per page
Query Builder