EUVD-2026-10192

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be use...

PT-2026-23933

Name of the Vulnerable Software and Affected Versions Tenda F453 version 1.0.0.3/1.If Description A stack-based buffer overflow exists in the fromSetCfm function within the /goform/setcfm file of the Tenda F453. The issue is triggered by manipulating the funcname/funcpara1 argument. Remote...

CVE-2026-3677 Tenda FH451 setcfm fromSetCfm stack-based overflow

A vulnerability was found in Tenda FH451 1.0.0.9. This impacts the function fromSetCfm of the file /goform/setcfm. The manipulation of the argument funcname/funcpara1 results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been made public and could be use...

Tenda FH451 安全漏洞

The Tenda FH451 is a router produced by the Chinese company Tenda. Version 1.0.0.9 of the Tenda FH451 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters funcname/funcpara1 in the file/goform/setcfm, which may lead to a stack buffer overflow...

CVE-2024-34942

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/exeCommand...

CVE-2024-41465

Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter at ip/goform/setcfm...

EUVD-2022-48529

Malicious code in bioql PyPI...

EUVD-2024-53627

Malicious code in bioql PyPI...

EUVD-2024-35118

Malicious code in bioql PyPI...

Tenda AC6 Improper Input Validation Vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from an improper input validation vulnerability that stems from improper handling of the funcname, funcpara1, and funcpara2 parameters in the...

CVE-2025-57528

An issue was discovered in Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function uri path: SetCfm...

CVE-2025-57528

An issue was discovered in Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function uri path: SetCfm...

CVE-2025-57528

CVE-2025-57528 affects Tenda AC6 (US_AC6V1.0BR_V15.03.05.16_multi_TD01). The underlying issue is improper input handling in the formSetCfm function (URI path: SetCfm) when processing the funcname, funcpara1, and funcpara2 parameters, which can be used to cause a denial of service. The entry provi...

CVE-2025-57528

An issue was discovered in Tenda AC6 USAC6V1.0BRV15.03.05.16multiTD01 allowing attackers to cause a denial of service via the funcname, funcpara1, funcpara2 parameters to the formSetCfm function uri path: SetCfm...

CVE-2024-33212

Tenda FH1206 V1.2.0.88155EN was discovered to contain a stack-based buffer overflow vulnerability via the funcpara1 parameter in ip/goform/setcfm...

CVE-2024-30635

Tenda F1202 v1.2.0.20408 has a stack overflow vulnerability located in the funcpara1 parameter in the formSetCfm function...

CVE-2024-57578

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the funcpara1 parameter in the formSetCfm function...

CVE-2025-28220

Tenda W6S v1.0.0.4510 has a Buffer Overflow vulnerability in the setcfm function, which allows remote attackers to cause web server crash via parameter funcpara1 passed to the binary through a POST request...

The vulnerability of the formSetCfm() function in the Tenda F1202 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetCfm function in the Tenda F1202 router’s microprogramming software is related to the operation that goes beyond the buffer boundaries in memory when processing the funcpara1 parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-25678

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function...