635 matches found
CVE-2025-62146
CVE-2025-62146 affects MX Time Zone Clocks (WordPress plugin) up to version 5.1.1. The issue is a Stored Cross-Site Scripting vulnerability arising from improper input handling during web page generation. The Wordfence entry lists the vulnerability as requiring Contributor+ privileges and notes t...
WordPress MX Time Zone Clocks plugin <= 5.1.1 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Nabil Irawan in WordPress Plugin MX Time Zone Clocks versions = 5.1.1...
PT-2025-54292
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Maksym Marko MX Time Zone Clocks allows Stored XSS.This issue affects MX Time Zone Clocks: from n/a through 5.1.1...
WordPress plugin MX Time Zone Clocks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...
Tenda AC21 SetSysTimeCfg File Stack Buffer Overflow Vulnerability
Tenda AC21 is a dual-band Gigabit wireless router launched by Tenda Technology, designed for home high-speed Internet needs, supporting 802.11acwave2 technology, dual-band concurrent rate up to 2033Mbps, of which the 5GHz band rate up to 1733Mbps, to meet the high-bandwidth applications, such as ...
EUVD-2025-198252
A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...
CVE-2025-13446
A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...
CVE-2025-13446
CVE-2025-13446 affects the Tenda AC21 router. The vulnerability exists in the /goform/SetSysTimeCfg handler, where improper validation of the timeZone/time input leads to a stack-based buffer overflow. This can be exploited remotely without user interaction, enabling arbitrary code execution or a...
CVE-2025-13446 Tenda AC21 SetSysTimeCfg stack-based overflow
A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...
PT-2025-47551
A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclos...
CVE-2025-12603
/etc/timezone can be Arbitrarily Written.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5...
CVE-2025-12603
CVE-2025-12603 concerns Azure Access Technology BLU-IC2 and BLU-IC4 devices where the /etc/timezone file can be written arbitrarily. Multiple sources (NVD/CNVD/CVELIST) concur that this affects BLU-IC2 and BLU-IC4 up to version 1.19.5. PT Security specifies that the vulnerability allows arbitrary...
CVE-2025-63458
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63458
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63458
The Tenda AX-1803 wireless router (version 1.0.0.1 ) is vulnerable to a stack-based buffer overflow within the form_fast_setting_wifi_set function. The root cause is the failure to correctly validate the length of input data provided via the timeZone parameter. An attacker can exploit this flaw b...
The vulnerability of the sscanf() function in Tenda AC20 router software allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the sscanf function in Tenda AC20 router software lies in the issue of the operation exceeding the buffer boundaries in memory when processing the timeZone parameter in the /goform/fastsettingwifiset command. Exploiting this vulnerability allows a remote attacker to execute...
CVE-2025-11385
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fastsettingwifiset. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publi...
CVE-2025-11385
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fastsettingwifiset. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publi...
CVE-2025-11385
The CVE-2025-11385 entry describes a buffer overflow in Tenda AC20 routers (up to version 16.03.08.12) caused by manipulating the timeZone argument in the sscanf usage within /goform/fast_setting_wifi_set. The underlying issue is a sscanf parameter handling overflow, allowing remote exploitation ...