CVE-2025-57220

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 to escalate privileges to root via a crafted UDP packet...

CVE-2025-9443

A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument newaccount can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and m...

CVE-2025-57215

Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function getparentControllistInfo...

CVE-2025-57218

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the security5g parameter in the function sub46284C...

CVE-2025-55583

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...

PT-2025-35126

Name of the Vulnerable Software and Affected Versions Tenda AC10 version 4.0 firmware 16.03.10.09 multi TDE01 Description Incorrect access control in the /goform/ate endpoint allows attackers to escalate privileges or access sensitive components via a crafted request. Recommendations At the momen...

CVE-2025-57219

The CVE-2025-57219 vulnerability affects Tenda AC10 v4.0 firmware (16.03.10.09_multi_TDE01). The root cause is improper access control on the /goform/ate endpoint, enabling an attacker to escalate privileges or access sensitive components via a crafted request. Exploit details, affected versions ...

CVE-2025-57219

Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 allows attackers to escalate privileges or access sensitive components via a crafted request...

PT-2025-35129

Name of the Vulnerable Software and Affected Versions Tenda AC10 version 4.0 firmware 16.03.10.20 Description The Tenda AC10 device contains a stack overflow issue via the get parentControl list Info function. Recommendations At the moment, there is no information about a newer version that...

PT-2025-35119

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.09 multi TDE01 Description: The Tenda AC10 firmware contains a stack overflow issue. This occurs through the security 5g parameter within the sub 46284C function. Recommendations: Update to a newer version of the...

CVE-2025-57218

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the security5g parameter in the function sub46284C...

CVE-2025-55583

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

CVE-2025-57218

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the security5g parameter in the function sub46284C...

CVE-2025-57215

Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function getparentControllistInfo...

CVE-2025-9526

A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation of the argument rmport leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the...

CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

Linksys E1700 安全漏洞

The Linksys E1700 is a wireless router from Linksys, USA. A security vulnerability exists in Linksys E1700 version 1.0.0.4.003, which originates from a stack buffer overflow due to incorrect manipulation of parameter rmport in file /goform/setSysAdm...

CVE-2025-55582

D-Link DCS-825L firmware v1.08.01 contains a vulnerability in the watchdog script mydlink-watch-dog.sh, which blindly respawns binaries such as dcp and signalc without verifying integrity, authenticity, or permissions. An attacker with local filesystem access via physical access, firmware...