141 matches found
The vulnerability of the fromSetSysTime(/goform/SetSysTimeCfg) function in the Tenda AC7 router’s software allows a attacker to execute arbitrary code or cause a service failure.
The vulnerability of the fromSetSysTime/goform/SetSysTimeCfg function in the Tenda AC7 router’s microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code or cause service...
CVE-2026-4974: Stack-based Buffer Overflow
A flaw has been found in Tenda AC7 15.03.06.44. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg of the component POST Request Handler. Executing a manipulation of the argument Time can lead to stack-based buffer overflow. It is possible to launch the attack...
PT-2026-28699
Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow can occur in the fromSetSysTime function within the /goform/SetSysTimeCfg file, specifically through manipulation of the Time argument via a POST request. This allows for...
The vulnerability of the fromSetSysTime() function in Tenda AX1806 router software allows a hacker to cause a service failure.
The vulnerability of the fromSetSysTime function in Tenda AX1806 router microprogramming software is related to buffer overflow when processing the timeZone parameter. Exploiting this vulnerability can allow an attacker to cause a service failure by sending a specially crafted request...
CVE-2025-70746
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-70746
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-70746
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-70746
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-70746
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
Tenda AX1806 security vulnerabilities
The Tenda AX1806 is a WiFi6 wireless router produced by the Chinese company Tenda. The Tenda AX1806 v1.0.0.1 version has a security vulnerability. This vulnerability stems from a stack overflow in the timeZone parameter of the fromSetSysTime function, which may allow for a denial-of-service attac...
CVE-2025-70746: Stack-based Buffer Overflow
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-70746
The Tenda AX-1806 WiFi6 wireless router, specifically version v1.0.0.1 , is vulnerable to a stack-based buffer overflow (CWE-121) within the fromSetSysTime function. This flaw occurs when the device processes the timeZone parameter. An attacker can exploit this vulnerability by sending a speciall...
PT-2026-3258
Tenda AX-1806 v1.0.0.1 was discovered to contain a stack overflow in the timeZone parameter of the fromSetSysTime function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
The vulnerability of the fromSetSysTime() function in Tenda AC6 router software allows a hacker to execute arbitrary code.
The vulnerability of the fromSetSysTime function in Tenda AC6 router software lies in the copying of buffers without checking the size of the input data when processing the ntpServer parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
EUVD-2025-28603
Malicious code in bioql PyPI...
EUVD-2022-46304
Malicious code in bioql PyPI...
EUVD-2022-46151
Malicious code in bioql PyPI...
EUVD-2025-25319
Malicious code in bioql PyPI...