Lucene search
+L

81 matches found

Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.11 views

PT-2024-23153 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda FH1203 version 2.0.1.6 Description: A critical issue was found in the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to a stack-based buffer overflow. It is possible to launc...

9CVSS8.9AI score0.01573EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2024/03/27 12:00 a.m.12 views

The vulnerability of the formQuickIndex() function (/goform/QuickIndex) in the Tenda AC15 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formQuickIndex function /goform/QuickIndex of the Tenda AC15 router’s software lies in the fact that the operation outputs data beyond the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability allows an attacker to compromise the...

10CVSS7.9AI score0.01372EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/03/27 12:00 a.m.8 views

PT-2024-23011 · Tenda · Tenda F1203

Name of the Vulnerable Software and Affected Versions: Tenda F1203 version 2.0.1.6 Description: A critical issue affects the formQuickIndex function of the file /goform/QuickIndex. The manipulation of the PPPOEPassword argument leads to a stack-based buffer overflow. This issue can be exploited...

9CVSS8.9AI score0.01773EPSS
SaveExploits1References6
OSV
OSV
added 2024/03/26 2:15 p.m.10 views

CVE-2024-2891

A vulnerability, which was classified as critical, was found in Tenda AC7 15.03.06.44. Affected is the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

8.8CVSS6.2AI score0.01683EPSS
SaveExploits1References4
OSV
OSV
added 2024/03/22 5:15 a.m.7 views

CVE-2024-2808

A vulnerability, which was classified as critical, has been found in Tenda AC15 15.03.05.18/15.03.20multi. This issue affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack may be initiate...

9.8CVSS6.3AI score0.01372EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/22 12:00 a.m.9 views

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. The Tenda AC15 suffers from a stack buffer overflow...

9.8CVSS8.2AI score0.01372EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2024/03/18 12:00 a.m.15 views

The vulnerability of the formQuickIndex function in the /goform/QuickIndex file of the Tenda AC18 router’s microprogramming system allows a hacker to escalate their privileges.

The vulnerability of the formQuickIndex function in the /goform/QuickIndex module of the Tenda AC18 router’s microprogramming system relates to the ability to read data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to enhance their privileges ...

9CVSS7.9AI score0.01563EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2024/03/15 8:15 a.m.7 views

CVE-2024-2486

A vulnerability was found in Tenda AC18 15.03.05.05. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. Th...

8.8CVSS7.8AI score0.01563EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/15 12:00 a.m.10 views

Tenda AC18 Security Vulnerability

Tenda AC18 is a router from Tenda, China. A security vulnerability exists in Tenda AC18 version V15.03.05.05, which originates from a stack-based buffer overflow in the PPPOEPassword parameter of the formQuickIndex function of the /goform/QuickIndex file...

9CVSS7.5AI score0.01563EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/03/15 12:00 a.m.9 views

PT-2024-2176 · Tenda · Tenda Ac18

Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.05 Description: A critical issue affects the formQuickIndex function of the /goform/QuickIndex file, allowing for a stack-based buffer overflow through the manipulation of the PPPOEPassword argument. This can be...

9CVSS9.2AI score0.01563EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/03/14 12:00 a.m.8 views

PT-2024-2403 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 versions 15.03.05.18 through 15.03.20 multi Description: A critical issue has been found in the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to a stack-based buffer...

10CVSS8.9AI score0.01372EPSS
SaveExploits1References8
OSV
OSV
added 2022/12/08 4:15 p.m.9 views

CVE-2022-45511

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the PPPOEPassword parameter at /goform/QuickIndex...

7.5CVSS5.9AI score0.00944EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/12/08 12:00 a.m.9 views

Tenda W30E 缓冲区错误漏洞

Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the PPPOEPassword parameter of /goform/QuickIndex...

7.5CVSS7.4AI score0.00944EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/25 3:15 p.m.6 views

CVE-2022-37815

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.6 views

CVE-2022-37815

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the PPPOEPassword parameter in the function formQuickIndex...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/15 10:15 p.m.4 views

CVE-2022-26996

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoeusername, pppoepasswd, and pppoeservicename parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

10CVSS6.1AI score0.02851EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2022/03/15 12:00 a.m.17 views

PT-2022-18172 · Arris · Arris Tr3300

Name of the Vulnerable Software and Affected Versions: Arris TR3300 version 1.0.13 Description: The issue is related to a command injection vulnerability in the pppoe function. This vulnerability allows attackers to execute arbitrary commands via a crafted request, specifically through the pppoe...

10CVSS9.7AI score0.02851EPSS
SaveExploits1References3
zdt
zdt
added 2013/01/26 12:00 a.m.132 views

ZTE ZXV10 W300 series (Djaweb router) vulnerability

Exploit for hardware platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

7.1AI score
SaveExploits0
zdt
zdt
added 2012/09/29 12:00 a.m.52 views

ZTE ZXDSL 831 II V7.5.0a_Z29_OV Update config / restore default

Exploit for hardware platform in category web applications Exploit Title: ZTE ZXDSL 831 II V7.5.0aZ29OV Update config / restoredefault Date: 04/09/2012 Author: The Black Devils Home: 1337day Exploit DataBase 1337day.com hardwarelink : N / A Category : webapps Google dork: N / A Tested on: Windows...

7.1AI score
SaveExploits0
zdt
zdt
added 2012/08/22 12:00 a.m.33 views

BCM96338 ADSL Router Get pppoe password CSRF Vulnerability

Exploit for hardware platform in category web applications Exploit Title: BCM96338 ADSL Router Get pppoe password Author: The Black Devils BCM96338 ADSL Exploit By Nuevo Asesino Now you can get the username & the password ------------------------------------------------------ Contact...

7.1AI score
SaveExploits0
Rows per page
Query Builder