Lucene search
+L

3703 matches found

Cvelist
Cvelist
•added 2023/08/24 12:00 a.m.•52 views

CVE-2023-40896

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind...

9.9AI score0.0124EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/08/24 12:00 a.m.•4 views

PT-2023-27689

Name of the Vulnerable Software and Affected Versions Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description A stack overflow issue was discovered via the parameter list at the "/goform/SetVirtualServerCfg" API endpoint. This issue affects the Tenda AC8 device. Recommendations For Tenda AC8...

9.8CVSS6AI score0.00928EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/24 12:00 a.m.•3 views

CVE-2023-40893: Out-of-bounds Write

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...

9.8CVSS8.4AI score0.00928EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/08/24 12:00 a.m.•45 views

CVE-2023-40892

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi...

9.9AI score0.00838EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/24 12:00 a.m.•7 views

CVE-2023-40898: Out-of-bounds Write

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...

9.8CVSS8.4AI score0.00838EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/24 12:00 a.m.•3 views

CVE-2023-40901: Out-of-bounds Write

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg...

9.8CVSS8.4AI score0.01266EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/24 12:00 a.m.•4 views

CVE-2023-40897: Out-of-bounds Write

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo...

9.8CVSS8.4AI score0.00838EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/24 12:00 a.m.•2 views

CVE-2023-40899: Out-of-bounds Write

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg...

9.8CVSS8.4AI score0.00928EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/08/24 12:00 a.m.•20 views

Tenda AC8 缓冲区错误漏洞

Tenda AC8 is a dual-band Gigabit wireless router from Tenda, designed for fiber optic homes up to 1000 megabytes, supporting dual-band concurrent transmission rates up to 1167Mbps, equipped with full Gigabit ports 1 WAN port + 3 LAN ports for 100-1000 megabit broadband access. Tenda AC8 suffers...

9.8CVSS8.2AI score0.00928EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/08/24 12:00 a.m.•20 views

PT-2023-4612 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version v4 US AC10V4.0si V16.03.10.13 cn Description: The issue is related to a stack overflow vulnerability via the parameter list and bindnum at the "/goform/SetIpMacBind" API endpoint. This vulnerability may allow a remote...

9.8CVSS9.6AI score0.0124EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/31 12:00 a.m.•5 views

CVE-2023-33534: Cross-Site Request Forgery (CSRF)

A Cross-Site Request Forgery CSRF in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goformsetcmdprocess...

8.8CVSS7.8AI score0.00368EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/07/31 12:00 a.m.•17 views

CVE-2023-33534

A Cross-Site Request Forgery CSRF in Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G software version S10G3.11.6 allows attackers to takeover user accounts via sending a crafted POST request to /goform/goformsetcmdprocess...

7.2AI score0.00368EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/07/31 12:00 a.m.•17 views

Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G 跨站请求伪造漏洞

The Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G is a mobile network wireless router from Guangzhou Tozed Kangwei Intelligent Technology. A security vulnerability exists in the Guanzhou Tozed Kangwei Intelligent Technology ZLTS10G S10G3.11.6, which allows an attacker to take over a user'...

8.8CVSS8AI score0.00368EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/07/17 7:15 p.m.•9 views

CVE-2023-37791

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

9.8CVSS7.4AI score0.12734EPSS
SaveExploits1References3
NVD
NVD
•added 2023/07/17 7:15 p.m.•24 views

CVE-2023-37791

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

9.8CVSS0.12734EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/17 12:00 a.m.•6 views

CVE-2023-37791: Out-of-bounds Write

D-Link DIR-619L v2.04TW was discovered to contain a stack overflow via the curTime parameter at /goform/formLogin...

9.8CVSS8.2AI score0.12734EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2023/07/11 2:07 p.m.•17 views

Exploit for Classic Buffer Overflow in Tenda Ac6_Firmware

CVE-2023-38823 Buffer Overflow in formSetCfm Affected mod...

9.8CVSS7.4AI score0.01203EPSS
SaveExploits3
BDU FSTEC
BDU FSTEC
•added 2023/07/03 12:00 a.m.•17 views

The vulnerability of the boa file at/goform/formSetWanDhcpplus in the microprogramming software for D-Link N300 WI-Fi Router DIR-605L allows a perpetrator to execute arbitrary code.

The vulnerability of the boa parameter file in the goform/formSetWanDhcpplus software for D-Link N300 WI-Fi Router DIR-605L wireless access points is related to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

9CVSS8.2AI score0.01225EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/06/08 3:15 p.m.•16 views

CVE-2023-34567

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg...

6.7CVSS5.9AI score0.00316EPSS
SaveExploits0References1
OSV
OSV
•added 2023/06/08 3:15 p.m.•14 views

CVE-2023-34566

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter time at /goform/saveParentControlInfo...

9.8CVSS5.9AI score0.00927EPSS
SaveExploits0References1
Rows per page
Query Builder