CVE-2025-52543 Login to the application services using only the password hash

E3 Site Supervisor Control firmware version 2.31F01 application services MGW and RCI uses client side hashing for authentication. An attacker can authenticate by obtaining only the password hash...

CVE-2025-6519

CVE-2025-6519 overview (confirmed details) : Affects Copeland E3 Site Supervisor firmware versions prior to 2.31F01. The vulnerability stems from a default admin account named “ONEDAY” that uses a daily-generated password which can be predicted. The ONEDAY user cannot be deleted or modified by an...

kernel: scsi: lpfc: Use memcpy() for BIOS version

In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Use memcpy for BIOS version The strlcat with FORTIFY support is triggering a panic because it thinks the target buffer will overflow although the correct target buffer size is passed in. Anyway, instead of memset with...

CVE-2024-48705

Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...

CVE-2025-9783

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly...

PT-2025-35506

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.05 Description: A stack-based buffer overflow exists due to the manipulation of the wanMTU argument in the file /goform/fromAdvSetMacMtuWan. Remote exploitation is possible. The exploit has been made publicly...

CVE-2025-29515

Incorrect access control in the DELTfile.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password...

CVE-2025-29522

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function...

CVE-2025-57220

An input validation flaw in the 'ate' service of Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 to escalate privileges to root via a crafted UDP packet...

CVE-2025-9443

A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument newaccount can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and m...

CVE-2025-57215

Tenda AC10 v4.0 firmware v16.03.10.20 was discovered to contain a stack overflow via the function getparentControllistInfo...

CVE-2025-57218

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the security5g parameter in the function sub46284C...

CVE-2025-55583

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...

CVE-2025-57219

Incorrect access control in the endpoint /goform/ate of Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 allows attackers to escalate privileges or access sensitive components via a crafted request...

PT-2025-35126

Name of the Vulnerable Software and Affected Versions Tenda AC10 version 4.0 firmware 16.03.10.09 multi TDE01 Description Incorrect access control in the /goform/ate endpoint allows attackers to escalate privileges or access sensitive components via a crafted request. Recommendations At the momen...

PT-2025-35129

Name of the Vulnerable Software and Affected Versions Tenda AC10 version 4.0 firmware 16.03.10.20 Description The Tenda AC10 device contains a stack overflow issue via the get parentControl list Info function. Recommendations At the moment, there is no information about a newer version that...

CVE-2025-57219

The CVE-2025-57219 vulnerability affects Tenda AC10 v4.0 firmware (16.03.10.09_multi_TDE01). The root cause is improper access control on the /goform/ate endpoint, enabling an attacker to escalate privileges or access sensitive components via a crafted request. Exploit details, affected versions ...

CVE-2025-57218

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the security5g parameter in the function sub46284C...

CVE-2025-55583

D-Link DIR-868L B1 router firmware version FW2.05WWB02 contains an unauthenticated OS command injection vulnerability in the fileaccess.cgi component. The endpoint /dws/api/UploadFile accepts a preapiarg parameter that is passed directly to system-level shell execution functions without...

PT-2025-35119

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.09 multi TDE01 Description: The Tenda AC10 firmware contains a stack overflow issue. This occurs through the security 5g parameter within the sub 46284C function. Recommendations: Update to a newer version of the...