CVE-2022-26290

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac...

CVE-2022-27077

Tenda M3 1.10 V1.0.0.124856 was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic...

CVE-2025-15232 Tenda M3 setAdPushInfo formSetAdPushInfo stack-based overflow

A vulnerability was identified in Tenda M3 1.0.0.134903. This vulnerability affects the function formSetAdPushInfo of the file /goform/setAdPushInfo. The manipulation of the argument mac/terminal leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit ...

EUVD-2025-205692

A vulnerability was found in Tenda M3 1.0.0.134903. Affected by this issue is the function formSetVlanPolicy of the file /goform/setVlanPolicyData. Performing manipulation of the argument qvlantruckport results in heap-based buffer overflow. Remote exploitation of the attack is possible. The...

PT-2025-53853

Name of the Vulnerable Software and Affected Versions Tenda M3 version 1.0.0.134903 Description A security issue exists in Tenda M3 version 1.0.0.134903. The formSetAdInfoDetails function within the /goform/setAdInfoDetail file is susceptible to a heap-based buffer overflow. This occurs through t...

EUVD-2022-41148

Malicious code in bioql PyPI...

EUVD-2022-53329

Malicious code in bioql PyPI...

EUVD-2022-53330

Malicious code in bioql PyPI...

EUVD-2022-53331

Malicious code in bioql PyPI...

EUVD-2022-41145

Malicious code in bioql PyPI...

CVE-2023-51095

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function formDelWlRfPolicy...

CVE-2023-51093

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function fromSetLocalVlanInfo...

CVE-2023-51094

Tenda M3 V1.0.0.124856 was discovered to contain a Command Execution vulnerability via the function TendaTelnet...

CVE-2022-32040

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetCfm...

CVE-2022-32041

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formGetPassengerAnalyseData...

CVE-2022-32043

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAccessCodeInfo...

CVE-2022-32035

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formMasterMng...

CVE-2022-32034

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the items parameter in the function formdelMasteraclist...

CVE-2022-32037

Tenda M3 V1.0.0.12 was discovered to contain a stack overflow via the function formSetAPCfg...

Tenda M3 TendaTelnet Method Command Execution Vulnerability

Tenda M3 is an access controller from Tenda, China. A command execution vulnerability exists in Tenda M3 version V1.0.0.124856, which stems from the failure of the TendaTelnet method to properly filter constructed command special characters, commands, etc. The vulnerability can be exploited to...