Tenda CH22 Router fromNatStaticSetting Code Execution

The vulnerability of the fromNatStaticSetting function in the /goform/NatStaticSetting file of the Tenda CH22 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could all...

Totolink N600R DoS

The vulnerability of the setWiFiMultipleConfig function in the Totolink N600R router microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

Totolink N600R DoS

The vulnerability of function sub41773C in the Totolink N600R router’s microprogramming system is related to the swapping of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failure...

TOTOLINK A3300R Router DoS

The vulnerability of the setOpModeCfg function in TOTOLINK A3300R router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

Tenda CH22 Router Code Execution

The vulnerability of the fromDhcpListClient function in the Tenda CH22 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary...

Planex MZK-DP300N Trust Management Vulnerability

The Planex MZK-DP300N is a hotel router travel router from Planex Japan. A trust management issue vulnerability exists in Planex MZK-DP300N version 1.07 and earlier, which stems from the use of hard-coded credentials and could allow an attacker to log in via Telnet and execute arbitrary commands ...

ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0), ai.ancf.lmos:lmos-operator (>=0.0.4, <=0.6.0) +7980 more potentially affected by CVE-2025-61795 via org.apache.tomcat.embed:tomcat-embed-core (>=10.1.0-m1, <=10.1.46)

org.apache.tomcat.embed:tomcat-embed-core MAVEN version =10.1.0-m1, =0.2.0, =0.0.4, =0.5.0, =0.6.0, =0.5.0, =0.7.0, =0.7.0, =0.5.0, =0.7.5, =0.8.3, =0.7.0, =0.5.0, =0.5.0, =0.5.0, =0.9.2 and more Source cves: CVE-2025-61795 Source advisory: MEND:CVE-2025-61795...

EUVD-2025-36168

A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to th...

CVE-2025-12272

A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing a manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may ...

CVE-2025-12265

A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the publ...

CVE-2025-12258

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from...

EUVD-2025-36079

A vulnerability was detected in Tenda O3 1.0.0.102478. This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and ma...

EUVD-2025-36069

A vulnerability was identified in Tenda O3 1.0.0.102478. Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is...

EUVD-2025-36067

A vulnerability was determined in Tenda O3 1.0.0.102478. Affected is the function SetValue/GetValue of the file /goform/setDhcpConfig. Executing manipulation of the argument dhcpEn can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been publicly...

Important: kernel6.12

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: bridge: mcast: Fix use-after-free during router port configuration CVE-2025-38248 In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix backlog accounting in qdiscdequeueinternal...

D-Link DIR-852 Router Disclosure Information

The vulnerability of the phpcgimain function in D-Link DIR-852 router microprogramming software is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to disclose confidential information remotely...

ncc2 for D-Link DIR-820L Unauthorized Access

The vulnerability of the ncc2 microprogramming software for D-Link DIR-820L routers is related to deficiencies in access control when processing the /getset.ccp endpoint. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protect...

Pwn2Own Ireland 2025: The Hacks, The Winners, and The Big Payouts

Hackers earned over $1 million at Pwn2Own Ireland 2025 in Cork, breaching printers, routers, NAS devices, and more as Summoning Team claimed Master of Pwn...

CVE-2025-60571

D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS...

D-Link DIR600L security vulnerabilities

D-Link DIR600L is a wireless router for home users, belonging to D-Link's "Cloud Router" series, with an external antenna design, supporting 802.11n standard, with a maximum wireless transmission rate of 150Mbps. The D-Link DIR600L suffers from a buffer overflow vulnerability, which is caused by...