CVE-2025-29516

The D-Link DSL-7740C modem, running firmware version DSL7740C.V6.TR069.20211230 , is susceptible to a command injection vulnerability within its backup function . The root cause is attributed to a lack of measures for cleaning incoming data, which allows a remote attacker to execute arbitrary com...

CVE-2025-29522

The D-Link DSL-7740C modem, specifically running firmware DSL7740C.V6.TR069.20211230 , is susceptible to a command injection vulnerability within its ping() function. The root cause is a failure to properly filter or neutralize special characters and commands provided at the control level. A remo...

CVE-2025-29515

Incorrect access control in the DELTfile.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password...

CVE-2025-29523

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function...

PT-2025-34615 · D Link · Dsl-7740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL-7740C versions DSL7740C.V6.TR069.20211230 Description: A command injection vulnerability exists in the EXE parameter of the D-Link DSL-7740C. Attackers can execute arbitrary commands by supplying a crafted GET request to the device...

CVE-2025-29516

D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function...

CVE-2025-29517

The D-Link DSL-7740C modem, specifically running firmware version DSL7740C.V6.TR069.20211230 , contains a command injection vulnerability within the traceroute6 function. The root cause is identified as a lack of measures for cleaning incoming data. A remote attacker can exploit this flaw to exec...

CVE-2025-29519

A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a crafted GET request...

PT-2025-35506

Name of the Vulnerable Software and Affected Versions Tenda AC20 version 16.03.08.05 Description A stack-based buffer overflow exists due to the manipulation of the wanMTU argument in the file /goform/fromAdvSetMacMtuWan. Remote exploitation is possible. The exploit has been made publicly...

PT-2025-34611 · D Link · Dsl-7740C

Name of the Vulnerable Software and Affected Versions: D-Link DSL-7740C version DSL7740C.V6.TR069.20211230 Description: An incorrect access control issue exists in the config.xgi function of the device. This allows attackers to download the configuration file by submitting a crafted web request...

CVE-2025-55606

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter...

CVE-2025-55605

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the saveParentControlInfo function via the deviceName parameter...

CVE-2025-55634

Incorrect access control in the RTMP server settings of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allows unauthorized attackers to cause a Denial of Service DoS via initiating a large number of simultaneous ffmpeg-based stream pushes...

CVE-2025-55629

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value...

CVE-2025-55631

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 was discovered to manage users' sessions system wide instead of an account-by-account basis, potentially leading to a Denial of Service DoS via resource exhaustion. NOTE: the Supplier reports that the...

CVE-2025-55564

Tenda AC15 v15.03.05.19multiTD01 has a stack overflow via the list parameter in the fromSetIpMacBind function...

CVE-2025-55637

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 was discovered to contain a command injection vulnerability via the setddnspipsystem function...

CVE-2025-55630

A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 when entering the wrong username and password allows attackers to enumerate existing accounts...

CVE-2025-55629

Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 allow attackers to arbitrarily change other users' passwords via manipulation of the userName value...

CVE-2025-55630

A discrepancy in the error message returned by the login function of Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 when entering the wrong username and password allows attackers to enumerate existing accounts...