CVE-2025-14656: Buffer Copy without Checking Size of Input

A weakness has been identified in Tenda AC20 16.03.08.12. This affects the function httpd of the file /goform/openSchedWifi. Executing a manipulation of the argument schedStartTime/schedEndTime can lead to buffer overflow. The attack may be performed from remote. The exploit has been made availab...

PT-2025-51160

Name of the Vulnerable Software and Affected Versions Tenda AC20 version 16.03.08.12 Description A flaw exists in the Tenda AC20 device. Manipulation of the schedStartTime/schedEndTime arguments within the httpd function of the /goform/openSchedWifi file can lead to a buffer overflow. This issue...

CVE-2025-60339

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the schedStartTime and schedEndTime parameters...

CVE-2025-60339

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the schedStartTime and schedEndTime parameters...

CVE-2025-60339

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the schedStartTime and schedEndTime parameters...

CVE-2025-60339

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the schedStartTime and schedEndTime parameters...

CVE-2025-60339

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the schedStartTime and schedEndTime parameters...

CVE-2025-60339: Out-of-bounds Write

Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service DoS via injecting a crafted payload into the schedStartTime and schedEndTime parameters...

CVE-2025-60339

The Tenda AC6 wireless router, running firmware version v.15.03.06.50 , is susceptible to multiple buffer overflow vulnerabilities in the openSchedWifi function. The root cause is a failure to properly validate the length of input data, specifically when handling the schedStartTime and schedEndTi...

EUVD-2022-29066

Malicious code in bioql PyPI...

EUVD-2025-28774

Malicious code in bioql PyPI...

EUVD-2022-30117

Malicious code in bioql PyPI...

EUVD-2022-30097

Malicious code in bioql PyPI...

The vulnerability of the setSchedWifi function in Tenda AS5 microprogrammed router software, which allows for the execution of arbitrary code.

The vulnerability of the setSchedWifi function in Tenda AS5 software-based routers is related to buffer overflows in the stack when processing the schedEndTime parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted POST request...

CVE-2025-46035

Buffer Overflow vulnerability in Tenda AC6 v.15.03.05.16 allows a remote attacker to cause a denial of service via the oversized schedStartTime and schedEndTime parameters in an unauthenticated HTTP GET request to the /goform/openSchedWifi endpoint...

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability that originates from the failure of the schedStartTime and schedEndTime parameters in the /goform/openSchedWifi endpoints to correctly validate the length size of the input data, and no...

CVE-2024-30626

Tenda FH1205 v2.0.0.7775 has a stack overflow vulnerability in the schedEndTime parameter from setSchedWifi function...

CVE-2022-45658

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the schedEndTime parameter in the setSchedWifi function...

CVE-2025-29363: Buffer Copy without Checking Size of Input

Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to buffer overflow via the schedStartTime and schedEndTime parameters at /goform/saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-29363

The Tenda RX3 (specifically model US_RX3V1.0br_V16.03.13.11_multi_TDE01 ) is vulnerable to a buffer overflow due to insufficient input size validation in the schedStartTime and schedEndTime parameters at the /goform/saveParentControlInfo API endpoint. An attacker can exploit this vulnerability by...