1242 matches found
CVE-2025-24496
An information disclosure vulnerability exists in the /goform/getproductInfo functionality of Tenda AC6 V5.0 V02.03.01.110. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability...
CVE-2025-27129
An authentication bypass vulnerability exists in the HTTP authentication functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send packets to trigger this vulnerability...
CVE-2025-24496
CVE-2025-24496 affects Tenda AC6 V5.0 V02.03.01.110. The information-disclosure flaw resides in /goform/getproductInfo; Talos notes an authentication bypass when requesting this URL, allowing a non-authenticated retrieval of module data via the generic getter, potentially exposing configuration d...
CVE-2025-30256
A denial of service vulnerability exists in the HTTP Header Parsing functionality of Tenda AC6 V5.0 V02.03.01.110. A specially crafted series of HTTP requests can lead to a reboot. An attacker can send multiple network packets to trigger this vulnerability...
CVE-2025-55499
The Tenda AC6 router, specifically version V15.03.06.23_multi , is vulnerable to a buffer overflow within the fromSetSysTime function. The root cause is the copying of buffers without verifying the size of the input data when processing the ntpServer parameter. A remote attacker can exploit this ...
PT-2025-34048 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version V02.03.01.110 Description: A firmware update vulnerability exists in the Firmware Signature Validation functionality. A specially crafted malicious file can lead to arbitrary code execution. An attacker can provide a malicio...
PT-2025-33475 · Tenda · Tenda Ac20
Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.12 Description: A stack-based buffer overflow issue was identified in the sub 46A2AC function of the /goform/setMacFilterCfg file. The manipulation of the deviceList argument leads to this overflow, and the attack...
Malicious code in @zalastax/nolb-react-ac (npm)
The package @zalastax/nolb-react-ac was found to contain malicious code...
Malicious code in ac-dom-metrics (npm)
The package ac-dom-metrics was found to contain malicious code...
MAL-2025-13968 Malicious code in ac-element-tracker (npm)
The package ac-element-tracker was found to contain malicious code...
MAL-2025-13662 Malicious code in @zalastax/nolb-react-ac (npm)
The package @zalastax/nolb-react-ac was found to contain malicious code...
MAL-2025-13966 Malicious code in ac-dom-metrics (npm)
The package ac-dom-metrics was found to contain malicious code...
MAL-2025-13964 Malicious code in ac-console (npm)
The package ac-console was found to contain malicious code...
MAL-2025-13969 Malicious code in ac-window-delegate (npm)
The package ac-window-delegate was found to contain malicious code...
Malicious code in ac-console (npm)
The package ac-console was found to contain malicious code...
Malicious code in ac-element-tracker (npm)
The package ac-element-tracker was found to contain malicious code...
Malicious code in ac-dom-traversal (npm)
The package ac-dom-traversal was found to contain malicious code...
Malicious code in ac-window-delegate (npm)
The package ac-window-delegate was found to contain malicious code...