CVE-2025-12209

CVE-2025-12209 affects Tenda O3 firmware 1.0.0.10(2478). The vulnerability lies in the SetValue/GetValue handlers of /goform/setDhcpConfig, where manipulating the dhcpEn argument can trigger a stack-based buffer overflow. This may be exploitable remotely and, according to multiple sources, an exp...

Tenda O3 安全漏洞

Tenda O3 is an outdoor wireless bridge from Tenda, China. The Tenda O3 suffers from a buffer overflow vulnerability that stems from the failure of the parameter enable of the SetValue/GetValue function in the file /goform/sysAutoReboot to correctly validate the length of the input data, which can...

CVE-2025-12210: Stack-based Buffer Overflow

A vulnerability was identified in Tenda O3 1.0.0.102478. Affected by this vulnerability is the function SetValue/GetValue of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is...

CVE-2025-12209: Stack-based Buffer Overflow

A vulnerability was determined in Tenda O3 1.0.0.102478. Affected is the function SetValue/GetValue of the file /goform/setDhcpConfig. Executing a manipulation of the argument dhcpEn can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been publicly...

CVE-2025-12212: Stack-based Buffer Overflow

A weakness has been identified in Tenda O3 1.0.0.102478. This affects the function SetValue/GetValue of the file /goform/setNetworkService. This manipulation of the argument upnpEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the...

CVE-2025-12214: Stack-based Buffer Overflow

A vulnerability was detected in Tenda O3 1.0.0.102478. This issue affects the function SetValue/GetValue of the file /goform/sysAutoReboot. Performing a manipulation of the argument enable results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public and...

CVE-2025-12213: Stack-based Buffer Overflow

A security vulnerability has been detected in Tenda O3 1.0.0.102478. This vulnerability affects the function SetValue/GetValue of the file /goform/setVlanConfig. Such manipulation of the argument lan leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been...

CVE-2025-12211: Stack-based Buffer Overflow

A security flaw has been discovered in Tenda O3 1.0.0.102478. Affected by this issue is the function SetValue/GetValue of the file /goform/setDmzInfo. The manipulation of the argument dmzIP results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been...

The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices stems from the operation of the function beyond the buffer in memory when processing the password parameter for the goform/fastsettingpppoeset endpoint. Exploiting this vulnerability allows a malicious...

The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices lies in the fact that the operation exceeds the buffer boundaries in memory when processing the newVersion parameter at the end of the goform/setNotUpgrade process. Exploiting this vulnerability allows...

The vulnerability of the SetValue() and GetValue() functions in Tenda AC15 microprogrammable routers allows a hacker to execute arbitrary code or cause service interruptions.

The vulnerability of the SetValue and GetValue functions in Tenda AC15 microprogramming devices stems from the operation of the function beyond the buffer in memory when processing the ddnsEn parameter for the /goform/SetDDNSCfg endpoint. Exploiting this vulnerability allows a remote attacker to...

EUVD-2022-28921

Malicious code in bioql PyPI...

EUVD-2023-34790

Malicious code in bioql PyPI...

The vulnerability of the GetValue() function in Tenda AC9 microprogramming software allows a hacker to induce a service failure.

The vulnerability of the GetValue function in Tenda AC9 router microprogramming software is related to buffer overflow in dynamic memory when processing the sys.vendor parameter. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via improper access control in the getValue for objects. An attacker can gain unauthorized access to, create, edit, or relate data and object entries or definitions across different virtu...

Apache Commons OGNL Arbitrary Code Execution Vulnerability

Apache Commons OGNL is a Java library from the American Apache Apache Foundation. A security vulnerability exists in Apache Commons OGNL Ognl.getValue, which originates from incorrectly filtering input parameters, and can be exploited by a remote attacker to submit a special request, which can be...

CVE-2025-53192

An expression injection flaw has been discovered in the Apache Commons OGNL library. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities, including accessing and invoking related methods. Although OgnlRuntime attempts to...

CVE-2025-53192 Apache Commons OGNL: Expression Injection leading to RCE

UNSUPPORTED WHEN ASSIGNED Improper Neutralization of Expression/Command Delimiters vulnerability in Apache Commons OGNL. This issue affects Apache Commons OGNL: all versions. When using the API Ognl.getValue​, the OGNL engine parses and evaluates the provided expression with powerful capabilities...

CVE-2025-53192

The Apache Commons OGNL library is vulnerable to an Improper Neutralization of Expression/Command Delimiters flaw. When using the Ognl.getValue API, the OGNL engine parses expressions with capabilities that allow accessing and invoking various methods. Because the OgnlRuntime blocklist is not com...

Apache Commons OGNL 安全漏洞

Apache Commons OGNL is a Java library from the American Apache Apache Foundation. A security vulnerability exists in Apache Commons OGNL Ognl.getValue, which originates from incorrectly filtering input parameters, and can be exploited by a remote attacker to submit a special request, which can be...