CVE-2026-3972 Tenda W3 HTTP setcfm formSetCfm stack-based overflow

A vulnerability was found in Tenda W3 1.0.0.32204. Affected by this issue is the function formSetCfm of the file /goform/setcfm of the component HTTP Handler. The manipulation of the argument funcpara1 results in stack-based buffer overflow. The attack can only be performed from the local network...

EUVD-2026-10346

An incorrect access control vulnerability exists in Tenda W15E V02.03.01.26cn. An unauthenticated attacker can access the /cgi-bin/DownloadCfg/RouterCfm.jpg endpoint to download the configuration file containing plaintext administrator credentials, leading to sensitive information disclosure and...

CVE-2026-3799

A flaw has been found in Tenda i3 1.0.0.62204. This impacts the function formSetCfm of the file /goform/setcfm. This manipulation of the argument funcpara1 causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used...

EUVD-2026-10231

A vulnerability was determined in Tenda F453 1.0.0.3/1.If. This issue affects the function fromSetCfm of the file /goform/setcfm. This manipulation of the argument funcname/funcpara1 causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly...

CVE-2026-3728

Technical details beyond what is provided here are not publicly available in the supplied documents. Monitor for updates from vendors and CVE databases.

PT-2026-27758

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bridge component when deleting a peer MEP Maintenance Engineering Protocol. Specifically, the issue occurs because cancel delayed work sync was called on c...

PT-2025-51298

Name of the Vulnerable Software and Affected Versions Lucee version 5.4.2.17 Description An authenticated attacker can inject malicious scripts through parameters in the administrative interface. This allows for the execution of arbitrary JavaScript in a victim’s browser session via crafted...

CVE-2025-52961

An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management CFM daemon and the Connectivity Fault Management Manager cfmman of Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10002-36QDD, PTX10004, PTX10008, PTX10016 allows an unauthenticated, adjacent attacker ...

CVE-2025-52961

An Uncontrolled Resource Consumption vulnerability in the Connectivity Fault Management CFM daemon and the Connectivity Fault Management Manager cfmman of Juniper Networks Junos OS Evolved on PTX10001-36MR, PTX10002-36QDD, PTX10004, PTX10008, PTX10016 allows an unauthenticated, adjacent attacker ...

PT-2025-41400

Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS Evolved versions 23.2R1-EVO through 23.2R2-S4-EVO Juniper Networks Junos OS Evolved versions 23.4 through 23.4R2-S4-EVO Juniper Networks Junos OS Evolved versions 24.2 through 24.2R2-EVO Juniper Networks Junos OS...

EUVD-2017-4570

Malware in sbrugna...

EUVD-2023-40770

Malicious code in bioql PyPI...

EUVD-2023-40768

Malicious code in bioql PyPI...

EUVD-2022-28922

Malicious code in bioql PyPI...

EUVD-2024-22105

Malicious code in bioql PyPI...

CVE-2025-57528

An issue was discovered in Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function uri path: SetCfm...

CVE-2025-55482

Tenda AC6 V15.03.06.23multi is vulnerable to Buffer Overflow in the formSetCfm function...

Juniper Networks Junos OS 缓冲区错误漏洞

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A buffer error vulnerability exists in Juniper Networks Junos OS that originates from an out-of-bounds write ...

CVE-2024-24706

Cross-Site Request Forgery CSRF vulnerability in Forum One WP-CFM wp-cfm.This issue affects WP-CFM: from n/a through 1.7.8...

CVE-2020-15929

In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow an attacker to write an arbitrary CFM file within the application's context containing attacker-defined CFML tags, leading to Remote Code Execution...