CVE-2026-3679

The CVE-2026-3679 entry affects Tenda FH451 1.0.0.9. A stack-based buffer overflow exists in the formQuickIndex function of /goform/QuickIndex, triggered by manipulation of the mit_linktype/PPPOEPassword argument. The issue allows remote exploitation, with a publicly available exploit noted in th...

CVE-2026-3679: Stack-based Buffer Overflow

A vulnerability was identified in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function formQuickIndex of the file /goform/QuickIndex. Such manipulation of the argument mitlinktype/PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

EUVD-2024-27925

Malicious code in bioql PyPI...

CVE-2025-9298

CVE-2025-9298 affects Tenda M3 1.0.0.12. The stack-based buffer overflow stems from the /goform/QuickIndex function formQuickIndex when processing the PPPOEPassword parameter. The vulnerability is exploitable remotely over the network and an exploit has been published. Multiple sources (CNVD/Red ...

PT-2025-34211 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.12 Description: A flaw has been found in the formQuickIndex function of the /goform/QuickIndex file. Manipulation of the PPPOEPassword argument can lead to a stack-based buffer overflow. The attack can be launched...

CVE-2025-9298: Stack-based Buffer Overflow

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

The vulnerability of the formQuickIndex function (/goform/QuickIndex) in the Tenda AC500 router software allows a hacker to execute arbitrary code.

The vulnerability of the formQuickIndex function /goform/QuickIndex in the Tenda AC500 router software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted POST request...

CVE-2024-3906

A vulnerability was found in Tenda AC500 2.0.1.91307. It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2024-3906 Tenda AC500 QuickIndex formQuickIndex stack-based overflow

A vulnerability was found in Tenda AC500 2.0.1.91307. It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2024-3906: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC500 2.0.1.91307. It has been declared as critical. This vulnerability affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. The attack can be initiated remotely...

The vulnerability of the formQuickIndex function (/goform/QuickIndex) in the Tenda AC7 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formQuickIndex function /goform/QuickIndex in the Tenda AC7 router software arises due to a buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Tenda F1202 formQuickIndex Method Buffer Overflow Vulnerability

The Tenda F1202 is an enterprise-grade dual-band wireless router that supports dual bands of 2.4GHz and 5GHz with a maximum transmission rate of 1200Mbps, equipped with four 5dBi antennas to enhance signal coverage. The Tenda F1202 suffers from a buffer overflow vulnerability that stems from the...

The vulnerability of the formQuickIndex() function (/goform/QuickIndex) in the Tenda FH1205 router software allows a attacker to compromise the integrity, accessibility, and confidentiality of the protected information.

The vulnerability of the formQuickIndex function /goform/QuickIndex of the Tenda FH1205 router’s software lies in the fact that the operation outputs outside the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability allows an attacker to compromise the...

CVE-2024-30636

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function...

CVE-2024-30636

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function...

CVE-2024-30636

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function...

CVE-2024-30636: Stack-based Buffer Overflow

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability via the PPPOEPassword parameter in the formQuickIndex function...

CVE-2024-30636

The Tenda F1202 router, specifically version v1.2.0.20(408) , is susceptible to a stack-based buffer overflow vulnerability. The flaw exists within the formQuickIndex function because the PPPOEPassword parameter fails to properly validate the length of the input data. This allows an attacker to w...

Tenda FH1203 formQuickIndex Method Buffer Overflow Vulnerability

Tenda FH1203 is a dual-band wireless router from Tenda China, mainly used for home network coverage. The Tenda FH1203 suffers from a buffer overflow vulnerability that originates from the PPPOEPassword parameter of the formQuickIndex method of the /goform/QuickIndex file that fails to correctly...

CVE-2024-3011: Stack-based Buffer Overflow

A vulnerability was found in Tenda FH1205 2.0.0.7775. It has been classified as critical. This affects the function formQuickIndex of the file /goform/QuickIndex. The manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to initiate the attack remotely. T...