EUVD-2025-13603

Malicious code in bioql PyPI...

EUVD-2025-13602

Malicious code in bioql PyPI...

EUVD-2025-13591

Malicious code in bioql PyPI...

The vulnerability of the check_dws_cookie function in the /storage directory of the Tenda DAP-1520 router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the checkdwscookie function in the /storage directory of the Tenda DAP-1520 router microprogramming system is related to writing beyond buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by using the host paramet...

Tenda DAP-1520 check_dws_cookie function buffer overflow vulnerability

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability, which originates from the function checkdwscookie in file/storage failing to correctly validate the length and size of the input data, which can be exploited by a...

Tenda DAP-1520 mod_graph_auth_uri_handler function buffer overflow vulnerability

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability that originates from the failure of the modgraphauthurihandler function in file/storage to properly validate the length of the input data, which could be exploited...

Tenda DAP-1520 set_ws_action function buffer overflow vulnerability

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability, which originates from the failure of the function setwsaction in the file /dws/api to correctly validate the length of the input data, which can be exploited by a...

CVE-2025-4356

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4354

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4355

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4356

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4356

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4354

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4354

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4355

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4355

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4356 Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4356

CVE-2025-4356 affects Tenda DAP-1520 (firmware 1.10B04_BETA02). The vulnerability is a stack-based buffer overflow in the mod_graph_auth_uri_handler function under /storage of the Authentication Handler, caused by improper input length validation. It can be triggered remotely and has public explo...

CVE-2025-4356 Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4355

CVE-2025-4355 affects Tenda DAP-1520, specifically the function set_ws_action in the file /dws/api/. The root cause is a heap-based buffer overflow in set_ws_action, which can be triggered remotely. Public references (CNVD, NVD, Red Hat CVE pages, and PTSecurity) describe the vulnerability as all...