PT-2025-47668

Name of the Vulnerable Software and Affected Versions LogStare Collector affected versions not specified Description LogStare Collector has an authorization issue within the UserRegistration component. A user without administrative privileges can create new user accounts by submitting a specially...

CVE-2025-63213

The QVidium Opera11 device firmware version 2.9.0-Ax4x-opera11 is vulnerable to Remote Code Execution RCE due to improper input validation on the /cgi-bin/netping.cgi endpoint. An attacker can exploit this vulnerability by sending a specially crafted GET request with a malicious parameter to inje...

The vulnerability of the sub_420F04() function in D-Link router microprogramming devices such as DWR-M920, DWR-M921, DWR-M960, DWR-M961, and DIR-825M allows a hacker to execute arbitrary code.

The vulnerability of the sub420F04 function in D-Link router microprogramming systems such as DWR-M920, DWR-M921, DWR-M960, DWR-M961, and DIR-825M lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2025-20341

A vulnerability in Cisco Catalyst Center Virtual Appliance could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by...

CVE-2025-20349 Cisco DNA Center API Command Injection Vulnerability

A vulnerability in the REST API of Cisco Catalyst Center could allow an authenticated, remote attacker to execute arbitrary commands in a restricted container as the root user. This vulnerability is due to insufficient validation of user-supplied input in REST API request parameters. An attacker...

EUVD-2025-50808

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-48950

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63457

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub4F55C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63147

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControlInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63455

Tenda AX-3 v16.03.12.10CN was discovered to contain a stack overflow via the shareSpeed parameter in the fromSetWifiGusetBasic function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63152

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the wpapskcrypto parameter of the wlSetExternParameter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63457

CVE-2025-63457 affects Tenda AX-1803 v1.0.0.1. The issue is a stack overflow in the wanMTU parameter within the sub_4F55C function, caused by insufficient input data length validation. This vulnerability can be triggered by a crafted request, enabling a Denial of Service (DoS). Public sources des...

CVE-2025-63152

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the wpapskcrypto parameter of the wlSetExternParameter function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

PT-2025-46170

Name of the Vulnerable Software and Affected Versions Tenda AX3 version 16.03.12.10 CN Description A stack overflow exists in the wlSetExternParameter function due to the wpapsk crypto parameter. This issue allows attackers to cause a Denial of Service DoS by sending a crafted request...

CVE-2025-63152

CVE-2025-63152 affects Tenda AX3 with the identified 16.03.12.10_CN context. Root cause: a stack overflow in the wlSetExternParameter function caused by improper validation of the length of the input parameter wpapsk_crypto . Impact stated across sources: a potential Denial of Service via a craft...

CVE-2025-63457

Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the wanMTU parameter in the sub4F55C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-38324

A Local File Inclusion LFI vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize user-supplied input. An attacker can exploit this by sending a crafted GET request to retrieve arbitrary files from the underlying system...