EUVD-2024-49030

Malicious code in bioql PyPI...

EUVD-2024-49031

Malicious code in bioql PyPI...

CVE-2025-57069

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57069

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57071

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the vpnUsers parameter in the formAddVpnUsers function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2022-36587

In Tenda G3 USG3V3.0brV15.11.0.67663ENTDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary...

CVE-2024-8224

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.20. This issue affects the function formSetDebugCfg of the file /goform/setDebugCfg. The manipulation of the argument enable/level/module leads to stack-based buffer overflow. The attack may be initiated remotel...

Tenda G3 formSetPortMapping Buffer Overflow Vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. The Tenda G3 suffers from a buffer overflow vulnerability that originates from the formSetPortMapping function failing to properly validate the length of input data, which can be exploited by an attacker to execute arbitrary code on the system or cau...

Tenda G3 formSetDebugCfg function command injection vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. Tenda G3 suffers from a command injection vulnerability, which stems from the formSetDebugCfg function failing to properly filter constructor command special characters, commands, etc. The vulnerability can be exploited to execute arbitrary commands...

PT-2024-33017 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 15.01.0.52848 755 EN Description: A hardcoded password vulnerability was discovered in the /etc ro/shadow file, which allows attackers to log in as root. This issue exists in the Tenda G3 firmware, specifically affecting the...

Tenda G3 Code Execution Vulnerability

Tenda G3 is a Qos Vpn router from Tenda China. A code execution vulnerability exists in Tenda G3 version 15.03.05.05, which stems from the usbPartitionName parameter in the formSetUSBPartitionUmount function failing to properly filter the special elements of the constructor segment. An attacker c...

Tenda G3 Buffer Overflow Vulnerability (CNVD-2024-40839)

Tenda G3 is a Qos Vpn router from Tenda China. A buffer overflow vulnerability exists in Tenda G3 version 15.11.0.20, which is caused by the enable/level/module parameter of the formSetDebugCfg function in the /goform/setDebugCfg file failing to correctly validate the length of the input data,...

Tenda G3 Buffer Overflow Vulnerability

The Tenda G3 is a multi-WAN router designed for small and medium-sized businesses, restaurants and hotel chains. A buffer overflow vulnerability exists in the Tenda G3. The vulnerability originates from the parameter pppoeServerWhiteMacIndex of the function formModifyPppAuthWhiteMac in the file...

PT-2022-23488 · Tenda · Tenda G3

Name of the Vulnerable Software and Affected Versions: Tenda G3 version US G3V3.0br V15.11.0.67663 EN TDE Description: The issue is caused by a buffer overflow in the getsinglepppuser function due to sscanf. Recommendations: For Tenda G3 version US G3V3.0br V15.11.0.67663 EN TDE, as a temporary...