D-Link DI-7001 Router Code Execution

The vulnerability of the /upgradefilter.asp file in D-Link DI-7001 router microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted POST requests...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference via the isSensitiveSpec function which calls grpcomni.CreateResource without checking if the resource's metadata field is nil. An attacker can cause a server crash and disrupt service availability by sending emp...

Tenda AC15 formfast_setting_pppoe_set function buffer overflow vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in the Tenda AC15 formfastsettingpppoeset function, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

VulnCheck KEV: CVE-2024-9643

The Four-Faith F3x36 router using firmware v2.0.0 is vulnerable to authentication bypass due to hard-coded credentials in the administrative web server. An attacker with knowledge of the credentials can gain administrative access via crafted HTTP requests. This issue appears similar to...

D-Link DIR-816 Router Disservice Attack

The vulnerability of the dirsetWanWifi function in D-Link DIR-816 router software lies in the issue of the operation being executed outside the buffer in memory when processing the pppoeusrname and pppoepsword parameters. Exploiting this vulnerability allows a remote attacker to cause a service...

UTT 518G security vulnerability

The UTT 518G is an enterprise router from China Aitai UTT. A security vulnerability exists in the UTT 518G V3v3.2.7-210919-161313 and prior versions, which stems from incorrect manipulation of the parameter Profile in the file /goform/formRemoteControl, which could result in a buffer overflow...

TOTOLINK X18 setEasyMeshAgentCfg Function Command Injection Vulnerability

TOTOLINK X18 is a Mesh WiFi 6 router system from TOTOLINK Taiwan, which supports WiFi 6 technology and optimizes home network coverage through the mesh function. TOTOLINK X18 suffers from a command injection vulnerability that stems from the failure of the agentName parameter in the...

PT-2025-43942

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromwebExcptypemanFilter function within the /goform/webExcptypemanFilter file. Manipulation of the page argument can trigger a buffer overflow, potentially allowing for remote...

UTT 518G security vulnerability

The UTT 518G is an enterprise router from China Aitai UTT. A security vulnerability exists in the UTT 518G V3v3.2.7-210919-161313 and prior versions, which stems from incorrect manipulation of the parameter txtMin2 in the file /goform/formTaskEditap, which could result in a buffer overflow...

Tenda CH22 formWrlsafeset function stack buffer overflow vulnerability

Tenda CH22 is an enterprise-grade wireless router from Tenda. Tenda CH22 has a stack buffer overflow vulnerability, which originates from the parameter mitssidindex in the formWrlsafeset function in file /goform/AdvSetWrlsafeset that fails to correctly validate the length of the input data, which...

PT-2025-41760

Name of the Vulnerable Software and Affected Versions Tenda RP3 Pro versions through 22.5.7.93 Description A security issue exists in Tenda RP3 Pro up to version 22.5.7.93, specifically within the Firmware Update Handler component. Manipulation of the current force upgrade pwd argument in the for...

PT-2025-43395

Name of the Vulnerable Software and Affected Versions Tenda AC6 V2.0 version 15.03.06.50 Description The Tenda AC6 V2.0 device contains a buffer overflow in the speed dir parameter within the SetSpeedWan function. A crafted input to this parameter can lead to a Denial of Service DoS...

EUVD-2025-33779

A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2025-11526

A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifichkHz results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public...

CVE-2025-11488

A weakness has been identified in D-Link DIR-852 up to 20251002. This affects an unknown part of the file /HNAP1/. Executing manipulation can lead to command injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. This vulnerabilit...

Tenda CH22 Router Code Execution

The vulnerability of the formWrlsafeset function in the Tenda CH22 router’s microprogramming software is related to the execution of an operation outside the buffer in memory when processing the mitssidinde parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary cod...

EUVD-2025-33407

A vulnerability has been found in Tenda W12 3.0.0.63948. The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-11525

A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-11525 Tenda AC7 SetUpnpCfg stack-based overflow

A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...