Tenda jd12l stack buffer overflow vulnerability (CNVD-2026-32970)

The Tenda jd12l is a multi-antenna wireless router designed for home users. The Tenda jd12l has a stack buffer overflow vulnerability, which stems from the improper handling of the formSetPPTPServer function in the /goform/SetPptpServerCfg file. Attackers can exploit this vulnerability to launch...

CVE-2026-13515: Stack-based Buffer Overflow

A security vulnerability has been detected in Tenda JD12L 16.03.53.23. Impacted is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. Such manipulation of the argument startIp leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclos...

EUVD-2026-28529

A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-8138 Tenda CX12L SetPptpServerCfg” formSetPPTPServer stack-based overflow

A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2026-8138: Stack-based Buffer Overflow

A vulnerability was found in Tenda CX12L 16.03.53.12. This issue affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg”. The manipulation results in stack-based buffer overflow. The attack can be executed remotely. The exploit has been made public and could be used...

CVE-2025-12611 Tenda AC21 SetPptpServerCfg formSetPPTPServer buffer overflow

A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...

CVE-2025-12611: Buffer Copy without Checking Size of Input

A vulnerability was identified in Tenda AC21 16.03.08.16. This vulnerability affects the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument startIp leads to buffer overflow. Remote exploitation of the attack is possible. The exploit is publicly...

EUVD-2024-53631

Malicious code in bioql PyPI...

EUVD-2022-48513

Malicious code in bioql PyPI...

EUVD-2022-47117

Malicious code in bioql PyPI...

EUVD-2024-35134

Malicious code in bioql PyPI...

EUVD-2022-48516

Malicious code in bioql PyPI...

CVE-2022-45649

Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the endIp parameter in the formSetPPTPServer function...

The vulnerability of the formSetPPTPServer() function in the Tenda AC7 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetPPTPServer function in the Tenda AC7 router’s microprogramming software is related to the operation of writing data outside of the buffer in memory when processing the pptpserverstartip and pptpserverendip parameters. Exploiting this vulnerability allows a remote...

CVE-2025-3346 Tenda AC7 SetPptpServerCfg formSetPPTPServer buffer overflow

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

CVE-2025-3346

CVE-2025-3346 affects Tenda AC7 (v15.03.06.44) due to a buffer overflow in the function formSetPPTPServer within /goform/SetPptpServerCfg. Manipulating pptp_server_start_ip/pptp_server_end_ip can overflow a buffer, potentially allowing remote code execution. Multiple connected sources confirm the...

CVE-2025-3346: Buffer Copy without Checking Size of Input

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

CVE-2024-34974

Tenda AC18 v15.03.05.19 is vulnerable to Buffer Overflow in the formSetPPTPServer function via the endIp parameter...

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formSetPPTPServer function in the Tenda AC18 router microprogramming system is related to buffer overflow during the processing of the startIP parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of th...

Tenda AC18 formSetPPTPServer function buffer overflow vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from the startIP parameter of the formSetPPTPServer function failing to properly validate the length of the input data, which can be exploited by an attacker to...