CVE-2025-12595

A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...

Tenda AC23 security vulnerabilities

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. Tenda AC23 has a buffer overflow vulnerability, the vulnerability stems from the parameter...

Tenda AC23 security vulnerabilities

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. Tenda AC23 has a buffer overflow vulnerability, the vulnerability stems from the file...

D-Link DIR600L Router DoS

The vulnerability of the formSetEasyWizard function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service...

D-Link DIR600L Router DoS

The vulnerability of the formSetWizard1 function in the D-Link DIR600L router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause a...

D-Link DIR600L Router DoS

The vulnerability of the formSetWizardSelectMode function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause servi...

D-Link DIR600L Router DoS

The vulnerability of the formAutoDetecWANwizard4 function in the microprogrammed routing software of D-Link DIR600L lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability can allow a malicious actor ...

D-Link DIR600L formSchedule() Maintenance Failure

The vulnerability of the formSchedule function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure...

D-Link DIR600L Router Form Set Enable Wizard Buffer Overflow

The vulnerability of the formSetEnableWizard function in D-Link DIR600L router microprogramming software arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Tenda AC18 SetValue DoS

The vulnerability of the SetValue function /goform/setNotUpgrade in the Tenda AC18 router’s microprogrammed software lies in the possibility of the operation being executed outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

D-Link DIR600L Router DoS

The vulnerability of the formTcpipSetup function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service...

D-Link DIR600L Router DoS

The vulnerability of the formSetLog function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure...

D-Link DIR600L Router DoS

The vulnerability of the formSetDomainFilter function in D-Link DIR600L router software lies in the copying of the buffer without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure remotel...

D-Link DIR600L Router DoS

The vulnerability of the formDeviceReboot function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the nextpage parameter. Exploiting this vulnerability could allow a malicious actor to cause servi...

D-Link DIR600L formSetWAN_Wizard52 Heap Buffer Overflow

The vulnerability of the formSetWANWizard52 function in the microprogramming software for D-Link DIR600L routers arises due to buffer overflow when processing the curTime parameter. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and...

EUVD-2025-37372

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the password parameter in the sub426EF8 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-37373

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the httphost parameter in the sub426EF8 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63423

Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 was discovered to store the Administrator password...

CVE-2025-63422

Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...

TOTOLINK A3300R setDdnsCfg function buffer overflow vulnerability

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a buffer overflow vulnerability that originates from the failure of the function setDdnsCfg in the file...