140 matches found
Tenda i3 安全漏洞
The Tenda i3 is a wireless access point device produced by the Chinese company Tenda. Version 1.0.0.62204 of the Tenda i3 contains a security vulnerability. This vulnerability stems from incorrect handling of the cmdinput parameter in the function formexeCommand within the file /goform/exeCommand...
EUVD-2022-43426
Malicious code in bioql PyPI...
EUVD-2022-43419
Malicious code in bioql PyPI...
EUVD-2025-4109
Malicious code in bioql PyPI...
The vulnerability of the formexeCommand()/goform/exeCommand function of the cmdinput component in the Tenda AC9 and AC15 microprogrammable routers allows a attacker to execute arbitrary commands.
The vulnerability of the formexeCommand function /goform/exeCommand of the cmdinput component in the Tenda AC9 and AC15 microprogrammed devices lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the path parameter. Exploiting this...
CVE-2025-10443
A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to buffer overflow. The attack can be executed remotely. The exploit is publicly...
CVE-2025-10443 Tenda AC9/AC15 exeCommand formexeCommand buffer overflow
A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to buffer overflow. The attack can be executed remotely. The exploit is publicly...
CVE-2025-10442
A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...
CVE-2025-10442
CVE-2025-10442 affects Tenda AC9 and AC15 with firmware 15.03.05.14. The vulnerability is in the function formexeCommand of /goform/exeCommand, where unsanitized cmdinput leads to OS command injection. Remote exploitation is possible and the exploit has been publicly disclosed. Affected devices c...
CVE-2025-10443: Buffer Copy without Checking Size of Input
A vulnerability was identified in Tenda AC9 and AC15 15.03.05.14/15.03.05.18. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Such manipulation of the argument cmdinput leads to buffer overflow. The attack can be executed remotely. The exploit is publicly...
CVE-2025-10442: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was determined in Tenda AC9 and AC15 15.03.05.14. This affects the function formexeCommand of the file /goform/exeCommand. This manipulation of the argument cmdinput causes os command injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed...
CVE-2025-9812: Buffer Copy without Checking Size of Input
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Executing manipulation of the argument cmdinput can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclose...
CVE-2024-46049
Tenda O6 V3.0 firmware V1.0.0.72054 contains a stack overflow vulnerability in the formexeCommand function...
CVE-2024-32314
Tenda AC500 V2.0.1.91307 firmware contains a command injection vulnerablility in the formexeCommand function via the cmdinput parameter...
CVE-2024-32281
Tenda AC7V1.0 v15.03.06.44 firmware contains a command injection vulnerablility in formexeCommand function via the cmdinput parameter...
CVE-2023-51099
Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formexeCommand...
CVE-2022-40107
Tenda i9 v1.0.0.83828 was discovered to contain a buffer overflow via the formexeCommand function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted string...
CVE-2022-40100
Tenda i9 v1.0.0.83828 was discovered to contain a command injection vulnerability via the FormexeCommand function...
The vulnerability of the formexeCommand() function in the Tenda AC6 router’s microprogramming software allows a hacker to execute arbitrary commands.
The vulnerability of the formexeCommand function in the Tenda AC6 router’s microprogramming software is related to incorrect code generation during the processing of the cmdinput parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...