Lucene search
+L

20986 matches found

CVE
CVE
added 2025/12/18 4:02 p.m.26 views

CVE-2025-14878

CVE-2025-14878 affects Tenda WH450 (v1.0.0.18). The vulnerability lies in the HTTP Request Handler, specifically in the /goform/wirelessRestart function, where manipulation of the GO argument causes a stack-based buffer overflow. Remote exploitation is possible, and a public PoC/exploit exists. A...

10CVSS9.3AI score0.00978EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/18 4:02 p.m.4 views

CVE-2025-14878 Tenda WH450 HTTP Request wirelessRestart stack-based overflow

A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit...

10CVSS9.3AI score0.00978EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/12/18 12:35 a.m.24 views

CVE-2025-67074

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serverName to /goform/AdvSetMacMtuWan...

6.5CVSS8AI score0.00379EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.13 views

PT-2025-52585

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 Description A stack-based buffer overflow exists in the HTTP Request Handler component of Tenda AC18 version 15.03.05.05. The issue is located in the strcpy function within the file /goform/GetParentControlInfo...

9CVSS7AI score0.0074EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.22 views

PT-2025-52552

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 Description A flaw exists in the Tenda AC18 router that could allow for remote attacks. The issue is related to the sprintf function within the HTTP Request Handler component, specifically in the file...

9CVSS7.2AI score0.00781EPSS
SaveExploits1References19
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.11 views

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from improper handling of the parameter ssidindex in the file /goform/onSSIDChange, which may result in a stack buffer overflow...

10CVSS9.7AI score0.06659EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.10 views

PT-2025-53672

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A stack-based buffer overflow exists in the Tenda WH450 router. The issue is related to the manipulation of the ip1 argument within an unknown function of the /goform/PPTPServer file. This allows for...

9CVSS6.8AI score0.0088EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.7 views

PT-2025-53536

Уязвимость функции sprintf микропрограммного обеспечения маршрутизаторов Tenda AC18 связана с выходом операции за границы буфера в памяти при обработке параметра scanList. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код или вызвать отказ в...

9CVSS7.2AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.11 views

PT-2025-52261

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A security flaw exists in Tenda WH450 version 1.0.0.18. The issue is related to the manipulation of the GO argument within the HTTP Request Handler component, specifically in the file...

10CVSS9.6AI score0.00978EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.12 views

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from improper handling of the parameter GO in the file /goform/wirelessRestart, which could result in a stack buffer overflow...

10CVSS9.7AI score0.00978EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.20 views

PT-2025-52601

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A stack-based buffer overflow issue exists in the processing of the file /goform/SafeUrlFilter within Tenda WH450 version 1.0.0.18. Manipulation of the page argument in this file can lead to the overflo...

10CVSS9.8AI score0.00978EPSS
SaveExploits1References16
Positive Technologies
Positive Technologies
added 2025/12/18 12:00 a.m.14 views

PT-2025-52268

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A flaw exists in the Tenda WH450 that allows remote attackers to trigger a stack-based buffer overflow. The issue is related to the manipulation of the ssid index argument within the /goform/onSSIDChang...

10CVSS9.6AI score0.06659EPSS
SaveExploits1References13
EUVD
EUVD
added 2025/12/17 9:30 p.m.10 views

EUVD-2025-203930

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serverName to /goform/AdvSetMacMtuWan...

7.4AI score0.00379EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/12/17 9:30 p.m.14 views

EUVD-2025-203927

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serviceName to /goform/AdvSetMacMtuWan...

9.8CVSS7.4AI score0.00692EPSS
SaveExploits1References2
OSV
OSV
added 2025/12/17 8:15 p.m.11 views

CVE-2025-67074

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serverName to /goform/AdvSetMacMtuWan...

6.5CVSS6.3AI score0.00379EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/17 8:15 p.m.15 views

CVE-2025-67073

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serviceName to /goform/AdvSetMacMtuWan...

9.8CVSS0.00692EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/17 8:15 p.m.14 views

CVE-2025-67074

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serverName to /goform/AdvSetMacMtuWan...

6.5CVSS0.00379EPSS
SaveExploits1References1
OSV
OSV
added 2025/12/17 8:15 p.m.12 views

CVE-2025-67073

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload field serviceName to /goform/AdvSetMacMtuWan...

9.8CVSS6.3AI score0.00692EPSS
SaveExploits1References1
CVE
CVE
added 2025/12/17 12:00 a.m.35 views

CVE-2025-67074

CVE-2025-67074 affects Tenda AC10 V4.0 firmware 16.03.10.20. A buffer overflow in the bin httpd function fromAdvSetMacMtuWan can be triggered by a crafted POST to /goform/AdvSetMacMtuWan (manipulating the serverName field), potentially causing denial of service and possibly code execution. Exploi...

6.5CVSS7.6AI score0.00379EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2025/12/17 12:00 a.m.8 views

Tenda AC10 安全漏洞

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in Tenda AC10 version V16.03.10.20, which originates from a buffer overflow in the fromAdvSetMacMtuWan function, which could lead to denial of service and code execution...

6.5CVSS7.7AI score0.00379EPSS
SaveExploits1References2
Rows per page
Query Builder