CVE-2025-5622

A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli5g of the file /goform/wirelessApcli5g. The manipulation of the argument apclimode5g/apclienc5g/apclidefaultkey5g leads to stack-based buffer overflow. The attack...

CVE-2025-5623

CVE-2025-5623 affects D-Link DIR-816 firmware 1.10CNB05, targeting the qosClassifier function in /goform/qosClassifier. The vulnerability enables a remote, stack-based buffer overflow through manipulation of dip_address/sip_address arguments, with high impact on confidentiality, integrity, and av...

CVE-2025-5623 D-Link DIR-816 qosClassifier stack-based overflow

A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dipaddress/sipaddress leads to stack-based buffer overflow. It is possible to initiate the attack...

CVE-2025-5622 D-Link DIR-816 wirelessApcli_5g stack-based overflow

A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli5g of the file /goform/wirelessApcli5g. The manipulation of the argument apclimode5g/apclienc5g/apclidefaultkey5g leads to stack-based buffer overflow. The attack...

CVE-2025-5622

CVE-2025-5622 affects the D-Link DIR-816 router (firmware 1.10CNB05). The vulnerability is a stack-based buffer overflow in the function wirelessApcli_5g within /goform/wirelessApcli_5g, triggered by improper length validation of arguments apcli_mode_5g/apcli_enc_5g/apcli_default_key_5g. It can b...

CVE-2025-5619 Tenda CH22 addUserName formaddUserName stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. The attack may be initiated remotely. The explo...

CVE-2025-5619

CVE-2025-5619 affects Tenda CH22 1.0.0.1. A stack-based buffer overflow exists in the addUserName function (/goform/addUserName) triggered by manipulating the Password parameter. The vulnerability can be exploited remotely, and public disclosures exist. Connected sources corroborate the issue acr...

CVE-2025-5619 Tenda CH22 addUserName formaddUserName stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. The attack may be initiated remotely. The explo...

CVE-2025-5600

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated...

CVE-2025-5600 TOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated...

CVE-2025-5572

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched...

CVE-2025-5572

CVE-2025-5572 concerns the D-Link DCS-932L camera (firmware 2.18.01). The vulnerability lies in the function setSystemEmail in /setSystemEmail, where manipulating the EmailSMTPPortNumber argument causes a stack-based buffer overflow. It is described as remotely exploitable, and the affected devic...

PT-2025-23975 · Tenda · Tenda Ch22

Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A critical vulnerability was found in Tenda CH22, affecting the formNatlimit function of the file /goform/Natlimit. The manipulation of the page argument leads to a stack-based buffer overflow. It is...

PT-2025-23871 · Tenda · Tenda Ch22

Name of the Vulnerable Software and Affected Versions: Tenda CH22 version 1.0.0.1 Description: A critical issue has been found in the Tenda CH22, affecting the formaddUserName function of the file /goform/addUserName. The manipulation of the Password argument leads to a stack-based buffer overflo...

CVE-2025-5527

A vulnerability was found in Tenda RX3 16.03.13.11multiTDE01. It has been rated as critical. This issue affects the function savestaticroutedata of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely...

CVE-2025-5527 Tenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow

A vulnerability was found in Tenda RX3 16.03.13.11multiTDE01. It has been rated as critical. This issue affects the function savestaticroutedata of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely...

CVE-2025-5527

The CVE-2025-5527 entry concerns Tenda RX3 with build 16.03.13.11_multi_TDE01. A vulnerability exists in the function save_staticroute_data of the file /goform/SetStaticRouteCfg where manipulation of the argument list (list) causes a stack-based buffer overflow. The issue can be exploited remotel...

CVE-2025-5527 Tenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow

A vulnerability was found in Tenda RX3 16.03.13.11multiTDE01. It has been rated as critical. This issue affects the function savestaticroutedata of the file /goform/SetStaticRouteCfg. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated remotely...

CVE-2025-5503

A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. This affects the function formMapReboot of the file /boafrm/formMapReboot. The manipulation of the argument deviceMacAddr leads to stack-based buffer overflow. It is possible to initiate the attack...

CVE-2025-5503

CVE-2025-5503 affects TOTOLINK X15 with firmware 1.0.0-B20230714.1105. The issue resides in the /boafrm/formMapReboot function; manipulating the deviceMacAddr argument leads to a stack-based buffer overflow, enabling remote execution of code. A public exploit is disclosed, and the vendor did not ...