CVE-2025-4356 Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4356 Tenda DAP-1520 Authentication storage mod_graph_auth_uri_handler stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4355 Tenda DAP-1520 api set_ws_action heap-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4355

CVE-2025-4355 affects Tenda DAP-1520, specifically the function set_ws_action in the file /dws/api/. The root cause is a heap-based buffer overflow in set_ws_action, which can be triggered remotely. Public references (CNVD, NVD, Red Hat CVE pages, and PTSecurity) describe the vulnerability as all...

CVE-2025-4355 Tenda DAP-1520 api set_ws_action heap-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been classified as critical. This affects the function setwsaction of the file /dws/api/. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-4354 Tenda DAP-1520 storage check_dws_cookie stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4354 Tenda DAP-1520 storage check_dws_cookie stack-based overflow

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02 and classified as critical. Affected by this issue is the function checkdwscookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2025-4354

CVE-2025-4354 affects Tenda DAP-1520, version 1.10B04_BETA02. The vulnerability occurs in the function check_dws_cookie (file/storage) due to improper length/size validation, leading to a stack-based buffer overflow. Remote attacker access is possible, and the exploit has been disclosed publicly....

PT-2025-19945 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical vulnerability has been found, affecting the mod graph auth uri handler function of the Authentication Handler component. This issue leads to a stack-based buffer overflow and can b...

Tenda DAP-1520 安全漏洞

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability that originates from the failure of the modgraphauthurihandler function in file/storage to properly validate the length of the input data, which could be exploited...

PT-2025-19944 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical issue has been found, affecting the set ws action function of the /dws/api/ file, leading to a heap-based buffer overflow. This can be initiated remotely. Recommendations: For Tend...

Tenda DAP-1520 安全漏洞

Tenda DAP-1520 is a dual-band wireless access point from Tenda China. The Tenda DAP-1520 suffers from a buffer overflow vulnerability, which originates from the failure of the function setwsaction in the file /dws/api to correctly validate the length of the input data, which can be exploited by a...

PT-2025-19943 · Tenda · Tenda Dap-1520

Name of the Vulnerable Software and Affected Versions: Tenda DAP-1520 version 1.10B04 BETA02 Description: A critical issue was found, affecting the check dws cookie function of the file /storage. This issue leads to a stack-based buffer overflow. The attack can be launched remotely...

The vulnerability of the HTTP Header Handler component in the http_request_parse function of the D-Link DAP-1562 wireless access point software allows a attacker to compromise the confidentiality, accessibility, and integrity of the protected information.

The vulnerability of the HTTP Header Handler component in the httprequestparse function of the D-Link DAP-1562 wireless access point’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

CVE-2025-2840 DAP to Autoresponders Email Syncing <= 1.0 - Unauthenticated Information Exposure

The DAP to Autoresponders Email Syncing plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information...

CVE-2025-2840

CVE-2025-2840 affects the DAP to Autoresponders Email Syncing plugin for WordPress. The vulnerability is an unauthenticated information exposure through the publicly accessible phpinfo.php script, enabling anyone to view potentially sensitive information from the exposed file. The Wordfence entry...

WordPress plugin DAP to Autoresponders Email Syncing 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. An information disclosure...

D-Link DAP-1620 set_ws_action function buffer overflow vulnerability

The D-Link DAP-1620 is a wireless repeater extender from D-Link. The D-Link DAP-1620 suffers from a buffer overflow vulnerability that stems from the Path component's setwsaction function failing to properly validate the length of the input data, which could be exploited by an attacker to execute...

D-Link DAP-1620 mod_graph_auth_uri_handler function stack buffer overflow vulnerability

The D-Link DAP-1620 is a wireless repeater extender from D-Link. A stack buffer overflow vulnerability exists in the D-Link DAP-1620 modgraphauthurihandler function, which can be exploited by an attacker to execute arbitrary code on the system or cause a denial of service...

D-Link DAP-1620 check_dws_cookie function stack buffer overflow vulnerability

The D-Link DAP-1620 is a wireless repeater extender from D-Link. The D-Link DAP-1620 suffers from a stack buffer overflow vulnerability that stems from the cookie handling component checkdwscookie function failing to properly validate the length and size of input data, which can be exploited by a...