133 matches found
EUVD-2024-53629
Malicious code in bioql PyPI...
EUVD-2024-33233
Malicious code in bioql PyPI...
EUVD-2023-53071
Malicious code in bioql PyPI...
CVE-2024-57214
TOTOLINK A6000R V1.0.1-B20201211.2000 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
CVE-2023-49047
Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName...
CVE-2023-34570
Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter devName at /goform/SetOnlineDevName...
CVE-2022-45648
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the devName parameter in the formSetDeviceName function...
CVE-2022-43101
Tenda AC23 V16.03.07.45cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function...
CVE-2024-57229
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
CVE-2024-57229
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
CVE-2024-57229: Improper Neutralization of Special Elements used in a Command
NETGEAR RAX5 AX1600 WiFi Router V1.0.2.26 was discovered to contain a command injection vulnerability via the devname parameter in the resetwifi function...
NETGEAR RAX5 安全漏洞
The NETGEAR RAX5 is a wireless router from NETGEAR. NETGEAR RAX5 suffers from a command injection vulnerability, which stems from the devname parameter in the resetwifi function failing to correctly filter constructed command special characters, commands, etc. The vulnerability can be exploited t...
CVE-2024-57229
NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 has a command injection in the reset_wifi function via the devname parameter due to insufficient input filtering. Affected component: reset_wifi; root cause: devname not properly sanitized. Impact: potential arbitrary command execution with network acce...
CVE-2025-3259
A vulnerability, which was classified as critical, has been found in Tenda RX3 16.03.13.11. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely...
CVE-2024-10698
A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The...
CVE-2024-57580
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function...
CVE-2024-57580
Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function...
Tenda AC18 安全漏洞
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the devName parameter of the formSetDeviceName function failing to properly validate the length of the input data, which can be exploited by an attacker to...
