54 matches found
CVE-2025-15252: Stack-based Buffer Overflow
A flaw has been found in Tenda M3 1.0.0.134903. The affected element is the function formSetRemoteDhcpForAp of the file /goform/setDhcpAP. This manipulation of the argument startip/endip/leasetime/gateway/dns1/dns2 causes stack-based buffer overflow. The attack can be initiated remotely. The...
EUVD-2022-46075
Malicious code in bioql PyPI...
EUVD-2022-48513
Malicious code in bioql PyPI...
EUVD-2024-35134
Malicious code in bioql PyPI...
CVE-2025-5629: Buffer Copy without Checking Size of Input
A vulnerability, which was classified as critical, was found in Tenda AC10 up to 15.03.06.47. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg of the component HTTP Handler. The manipulation of the argument startIp/endIp leads to buffer overflow. It is possible to...
CVE-2022-43026
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the endIp parameter at /goform/SetPptpServerCfg...
CVE-2025-29357
Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...
CVE-2025-29357: Improper Resource Shutdown or Release
Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...
CVE-2024-34974
Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...
CVE-2024-6964: Stack-based Buffer Overflow
A vulnerability, which was classified as critical, was found in Tenda O3 1.0.0.10. Affected is the function fromDhcpSetSer. The manipulation of the argument dhcpEn/startIP/endIP/preDNS/altDNS/mask/gateway leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...
CVE-2024-34974
Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...
CVE-2024-34974
Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...
Tenda AC18 安全漏洞
The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the endIp parameter in the formSetPPTPServer function failing to properly validate the length of the input data, which can be exploited by an attacker to cau...
CVE-2024-34974: Out-of-bounds Read
Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...
CVE-2024-34974
Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...
CVE-2024-34974
The Tenda AC18 router, specifically version 15.03.05.19 , is vulnerable to a Buffer Overflow in the formSetPPTPServer function. The vulnerability arises because the endIp parameter fails to properly validate the length of the input data. An attacker could exploit this flaw to cause a denial of se...
PT-2024-26274 · Tenda · Tenda Ac18
Name of the Vulnerable Software and Affected Versions: Tenda AC18 version 15.03.05.19 Description: The issue is related to a Buffer Overflow in the formSetPPTPServer function, which can be exploited via the endIp parameter. Recommendations: For Tenda AC18 version 15.03.05.19, as a temporary...
Tenda AC10 安全漏洞
Tenda AC10U is a wireless router from Tenda China. The Tenda AC10U suffers from a stack buffer overflow vulnerability, which originates in the file /goform/SetPptpServerCfg where the parameter endIP of the function formSetPPTPServer fails to correctly validate the length of the input data, which...
CVE-2024-2764: Stack-based Buffer Overflow
A vulnerability, which was classified as critical, was found in Tenda AC10U 15.03.06.48. This affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument endIP leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...