PT-2025-52585

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.05 Description A stack-based buffer overflow exists in the HTTP Request Handler component of Tenda AC18 version 15.03.05.05. The issue is located in the strcpy function within the file /goform/GetParentControlInfo...

CVE-2025-62864

Ampere AmpereOne AC03 , AmpereOne AC04 , and AmpereOne M devices are vulnerable to an out-of-bounds write within the UEFI-MM Secure Partition context . The flaw is triggered by an incorrectly formed System Management Call (SMC) sent to the UEFI-MM MMCommunicate service . Affected versions include...

EUVD-2025-201856

A vulnerability was determined in Tenda AC9 15.03.05.14multi. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/DownloadCfg.jpg of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The...

CVE-2025-12143 Stack Memory Corruption Vulnerability

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33...

EUVD-2025-199870

Stack-based Buffer Overflow vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33...

CVE-2025-12143

ABB Terra AC Wallbox suffers a stack-based buffer overflow (CWE-121) affecting versions up to 1.8.33. Root cause: stack-based overflow when processing certain inputs; impact includes potential code execution or firmware behavior alteration (via OCPP server communications) with HIGH integrity/avai...

CVE-2025-63666

Tenda AC15 v15.03.05.18multi issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to acce...

EUVD-2025-137206

Malicious code in imodiov-kufni-ac npm...

MAL-2025-182400 Malicious code in imodiov-kufni-ac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8c84ac7060595ac090b5100a82669e0f9cb0d67fd1a80bee07f114376382e4e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-135153

Malicious code in unimna-safafi-ac npm...

EUVD-2025-135152

Malicious code in unimna-safafi-ac npm...

Malicious code in unimna-safafi-ac (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4321defa4c65ee9a7aacffb3576a9f313a8994296f2579e3d6256bf2803654e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

CVE-2025-63666

Tenda AC15 v15.03.05.18multi issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to acce...

CVE-2025-63834

A stored cross-site scripting XSS vulnerability was discovered in Tenda AC18 v15.03.05.05multi. The vulnerability exists in the ssid parameter of the wireless settings. Remote attackers can inject malicious payloads that execute when any user visits the router's homepage...

CVE-2025-63835

A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05multi. The vulnerability exists in the guestSsid parameter of the /goform/WifiGuestSet interface. Remote attackers can exploit this vulnerability by sending oversized data to the guestSsid parameter, leading to...

CVE-2025-63834

A stored cross-site scripting XSS vulnerability was discovered in Tenda AC18 v15.03.05.05multi. The vulnerability exists in the ssid parameter of the wireless settings. Remote attackers can inject malicious payloads that execute when any user visits the router's homepage...

EUVD-2025-37475

A vulnerability was determined in Tenda AC10 16.03.10.13. Affected by this vulnerability is the function formSysRunCmd of the file /goform/SysRunCmd. This manipulation of the argument getui causes buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and m...

CVE-2025-61498

A buffer overflow in the UPnP service of Tenda AC8 Hardware v03.03.10.01 allows attackers to cause a Denial of Service DoS via supplying a crafted packet...

CVE-2025-12142

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33...

CVE-2025-12142 BSS(Block Started by Symbol) Memory Corruption Vulnerability

Buffer Copy without Checking Size of Input 'Classic Buffer Overflow' vulnerability in ABB Terra AC wallbox.This issue affects Terra AC wallbox: through 1.8.33...