CVE-2020-12131

The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter shown next to the UI logo...

EUVD-2020-4446

Malware in sbrugna...

EUVD-2025-24103

Malicious code in bioql PyPI...

EUVD-2022-30213

Malicious code in bioql PyPI...

EUVD-2023-34564

Malicious code in bioql PyPI...

The vulnerability of the setWan() function in the /goform/setWan software module of Linksys E1700 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setWan function in the /goform/setWan microprogramming software for Linksys E1700 routers is related to the operation of writing data outside of the buffer in memory when processing the parameters DeviceName and lanIp. Exploiting this vulnerability allows an attacker to...

Tenda AC6 saveParentControlInfo function buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the deviceName parameter in th...

Tenda AX3 saveParentControlInfo function buffer overflow vulnerability

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a buffer overflow vulnerability that originates from the deviceName parameter in th...

CVE-2025-55605

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter...

CVE-2025-55605

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter...

CVE-2025-55503

Tenda AC6 V15.03.06.23multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function...

Tenda Ax3 安全漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a buffer overflow vulnerability that originates from the deviceName parameter in th...

CVE-2025-55503

Tenda AC6 V15.03.06.23multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function...

CVE-2025-55503

Tenda AC6 V15.03.06.23multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function...

CVE-2025-55503

Tenda AC6 V15.03.06.23multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function...

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports IPv4 and IPv6 protocols and utilizes the 802.11ac/n wireless standard to provide a wireless transmission rate of 1167Mbps. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the deviceName parameter in th...

CVE-2025-55503

Tenda AC6 V15.03.06.23multi has a stack overflow vulnerability via the deviceName parameter in the saveParentControlInfo function...

PT-2025-34056 · Tenda · Tenda Ac6

Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.06.23 multi Description: The Tenda AC6 router firmware contains a stack overflow vulnerability. This issue is triggered via the deviceName parameter within the saveParentControlInfo function. Recommendations: Update to...

The vulnerability of the setDeviceName() function (/goform/setDeviceName) in the microprogrammed software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary commands.

The vulnerability of the setDeviceName function /goform/setDeviceName of Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers lies in the lack of measures to neutralize special elements during the processing of the DeviceName parameter. Exploiting this vulnerability allows an attack...

Linksys多款产品 命令注入漏洞

The Linksys RE6250, among others, is a wireless extender from Linksys USA. A command injection vulnerability exists in various Linksys products. The vulnerability stems from improper manipulation of the DeviceName parameter in the setDeviceName function, which may result in os command injection...