CVE-2025-15008 Tenda WH450 HTTP Request L7Port stack-based overflow

A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now publ...

EUVD-2025-204684

A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2025-15007

CVE-2025-15007 affects Tenda WH450 1.0.0.18. The vulnerability lies in the HTTP Request Handler’s /goform/L7Im, where manipulating the page argument triggers a stack-based buffer overflow. It is exploitable remotely and has publicly available PoC/exploit code. Publicly disclosed details indicate ...

CVE-2025-15007 Tenda WH450 HTTP Request L7Im stack-based overflow

A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2025-15006

A weakness has been identified in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/CheckTools of the component HTTP Request Handler. This manipulation of the argument ipaddress causes stack-based buffer overflow. The attack can be initiated...

CVE-2025-15006 Tenda WH450 HTTP Request CheckTools stack-based overflow

A weakness has been identified in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/CheckTools of the component HTTP Request Handler. This manipulation of the argument ipaddress causes stack-based buffer overflow. The attack can be initiated...

CVE-2025-15006

CVE-2025-15006 affects Tenda WH450 1.0.0.18. The vulnerability stems from the HTTP Request Handler in /goform/CheckTools, where manipulating the ipaddress argument triggers a stack-based buffer overflow. It is remotely exploitable and, per multiple sources, the public PoC/exploit is available. Af...

github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation

A flaw was found in Expr, an expression language and expression evaluation for Go. This vulnerability allows a denial of service DoS via recursive traversal over user-provided deeply nested or cyclic data structures without enforcing a maximum recursion depth, leading to a stack overflow panic an...

PT-2025-52627

Name of the Vulnerable Software and Affected Versions floooh sokol versions prior to 5d11344150973f15e16d3ec4ee7550a73fb995e0 Description A flaw exists in floooh sokol, specifically within the sg validate pipeline desc function in the sokol gfx.h library. This issue can lead to a stack-based buff...

SOUND4 LinkAndShare Transmitter 格式化字符串错误漏洞

SOUND4 LinkAndShare Transmitter is a remote control communication component from SOUND4 France. A Formatting String Error vulnerability exists in SOUND4 LinkAndShare Transmitter version 1.1.2, which stems from a Formatting String vulnerability that could lead to a memory stack overflow...

PT-2025-52620

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A flaw exists in the HTTP Request Handler component of the software. Specifically, the issue resides in an unknown part of the /goform/L7Port file. Manipulating the page argument can trigger a stack-bas...

PT-2025-52719

Name of the Vulnerable Software and Affected Versions wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954 Description The software contains a stack-based buffer overflow issue in the kiss rec byte function, found in src/kiss frame.c. Processing specially crafted KI...

PT-2025-52619

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A weakness exists in the Tenda WH450 device. The issue is a stack-based buffer overflow within the HTTP Request Handler component, specifically related to the file '/goform/CheckTools'. Manipulation of...

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from a misbehavior of the parameter page in the file /goform/SafeUrlFilter, which could result in a stack buffer overflow...

Sokol 安全漏洞

Sokol is a platform interface for Andre Weissflog individual developers. A security vulnerability exists in Sokol, which stems from a misbehavior of the function sgvalidatepipelinedesc in the library sokolgfx.h, which could lead to a stack buffer overflow...

CVE-2023-53966: Use of Externally-Controlled Format String

SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute...

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in the Tenda WH450 version 1.0.0.18, which originates from the incorrect operation of the parameter ipaddress in the file /goform/CheckTools, and could result in a stack buffer overflow...

PT-2025-52630

Name of the Vulnerable Software and Affected Versions Sharp Display Solutions projectors affected versions not specified Description A stack-based buffer overflow exists in Sharp Display Solutions projectors. This allows an attacker to potentially execute arbitrary commands and programs...

Dire Wolf 安全漏洞

Dire Wolf is a software radio modem from the individual developers at wb2osz. A security vulnerability exists in Dire Wolf 1.8 and earlier versions, which stems from a stack buffer overflow in the kissrecbyte function, which could result in stack memory corruption or an application crash...

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from a misbehavior of the parameter page in the file /goform/L7Port, which could result in a stack buffer overflow...