CVE-2025-2993

The CVE-2025-2993 entry concerns the Tenda FH1202 router (1.2.0.14(408)). A vulnerability in an unspecified function of /default.cfg allows manipulation of the argument “these,” leading to improper access control. The issue is exploitable remotely and, according to the sources, the exploit has be...

CVE-2025-2992

A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14408. Affected by this vulnerability is an unknown functionality of the file /goform/AdvSetWrlsafeset of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be launched...

CVE-2025-2992

A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14408. Affected by this vulnerability is an unknown functionality of the file /goform/AdvSetWrlsafeset of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be launched...

CVE-2025-2992

The CVE-2025-2992 entry concerns Tenda FH1202 (version 1.2.0.14(408)) where an unknown functionality in the Web Management Interface file /goform/AdvSetWrlsafeset allows improper access controls. The vulnerability can be exploited remotely and the exploit has been publicly disclosed. Connected so...

CVE-2025-2991 Tenda FH1202 Web Management Interface AdvSetWrlmacfilter access control

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is an unknown function of the file /goform/AdvSetWrlmacfilter of the component Web Management Interface. The manipulation leads to improper access controls. It is possible to launch the attack remotely. Th...

CVE-2025-2989

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects unknown code of the file /goform/AdvSetWrl of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

CVE-2025-2990

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been rated as critical. This issue affects some unknown processing of the file /goform/AdvSetWrlGstset of the component Web Management Interface. The manipulation leads to improper access controls. The attack may be initiated remotely...

CVE-2025-2989

A vulnerability was found in Tenda FH1202 1.2.0.14408. It has been declared as critical. This vulnerability affects unknown code of the file /goform/AdvSetWrl of the component Web Management Interface. The manipulation leads to improper access controls. The attack can be initiated remotely. The...

CVE-2025-2955

A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...

CVE-2025-2955

A vulnerability has been found in TOTOLINK A3000RU up to 5.9c.5185 and classified as problematic. This vulnerability affects unknown code of the file /cgi-bin/ExportIbmsConfig.sh of the component IBMS Configuration File Handler. The manipulation leads to improper access controls. The attack can b...

CVE-2025-2954

A vulnerability, which was classified as problematic, was found in mannaandpoem OpenManus up to 2025.3.13. This affects the function execute of the file app/tool/filesaver.py of the component File Handler. The manipulation leads to improper access controls. Local access is required to approach th...

CVE-2025-2688

A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ExportSyslog.sh of the component Syslog Configuration File Handler. The manipulation leads to improper access controls. The atta...

CVE-2025-2688

A vulnerability classified as problematic was found in TOTOLINK A3000RU up to 5.9c.5185. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/ExportSyslog.sh of the component Syslog Configuration File Handler. The manipulation leads to improper access controls. The atta...

CVE-2025-2688

TOTOLINK A3000RU (firmware up to 5.9c.5185) is affected by an Access Control/ improper permission issue in the Syslog Configuration File Handler, specifically the file /cgi-bin/ExportSyslog.sh. The vulnerability arises from improper access controls on an unknown functionality, enabling escalation...

CVE-2025-2686

CVE-2025-2686 affects the Mingyuefusu tushuguanlixitong (book management system) Backend component, specifically the doFilter function in the /admin/ path. The root cause is improper access control triggered by manipulation of the Request argument, enabling a remote attacker to exploit the vulner...

CVE-2025-2552

A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local network is required for this attack to...

CVE-2025-2550

A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack needs to be initiate...

CVE-2025-2551

A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is required for this attack. The exploit has...

CVE-2025-2547

A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can only be done within the local network. T...

CVE-2025-2548

A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The...