Lucene search
K

16574 matches found

RedhatCVE
RedhatCVE
added 2025/12/24 10:29 p.m.2 views

CVE-2025-15046

A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the argument netmsk leads to stack-based buffer overflow. It is possible to launch the attack remotely. Th...

10CVSS9.7AI score0.00991EPSS
Exploits1References1
CVE
CVE
added 2025/12/24 8:14 p.m.15 views

CVE-2025-8769

CVE-2025-8769 affects MegaSys/Megasys’ Telenium Online Web Application. The vulnerability arises from a Perl script used to load the login page with improper input validation, allowing an attacker to inject arbitrary Perl code through a crafted HTTP request and achieve remote code execution on th...

9.8CVSS7.8AI score0.00895EPSS
Exploits0References3
EUVD
EUVD
added 2025/12/24 12:30 a.m.3 views

EUVD-2025-204979

A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the argument netmsk leads to stack-based buffer overflow. It is possible to launch the attack remotely. Th...

10CVSS6.8AI score0.00991EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/12/24 12:0 a.m.3 views

PT-2025-53325

Name of the Vulnerable Software and Affected Versions V-SOL GPON/EPON OLT Platform version 2.03 Description The software contains an information disclosure issue that allows unauthorized access to configuration files. Attackers can obtain sensitive configuration data by sending HTTP GET requests ...

8.7CVSS6.3AI score0.00355EPSS
Exploits1References5
Packet Storm
Packet Storm
added 2025/12/24 12:0 a.m.164 views

📄 Varnish / Styx HTTP Request Smuggling

Proof of concept exploit that demonstrates an HTTP request smuggling vulnerability between Varnish and Styx / Nginx. ============================================================================================================================================= | Title : HTTP Request Smuggling TE.CL...

7AI score
Exploits0
ATTACKERKB
ATTACKERKB
added 2025/12/23 10:32 p.m.3 views

CVE-2025-15048

A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing a manipulation of the argument ipaddress can lead to command injection. The attack can be launched remotely. The exploit has bee...

9.8CVSS5.4AI score0.11343EPSS
Exploits1References5Affected Software1
CVE
CVE
added 2025/12/23 10:32 p.m.10 views

CVE-2025-15048

CVE-2025-15048 affects Tenda WH450 (v1.0.0.18). The vulnerability is in the HTTP Request Handler’s /goform/CheckTools, where tampering with the ipaddress argument enables remote command injection. Exploitation has been publicly disclosed and PoC/materials exist in multiple references; impact is d...

9.8CVSS7.2AI score0.11343EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2025/12/23 10:32 p.m.40 views

CVE-2025-15048 Tenda WH450 HTTP Request CheckTools command injection

A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing a manipulation of the argument ipaddress can lead to command injection. The attack can be launched remotely. The exploit has bee...

7.5CVSS0.11343EPSS
Exploits1References6
OSV
OSV
added 2025/12/23 10:15 p.m.2 views

CVE-2025-15046

A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the argument netmsk leads to stack-based buffer overflow. It is possible to launch the attack remotely. Th...

9.3CVSS6.3AI score
Exploits0References6
OSV
OSV
added 2025/12/23 10:15 p.m.4 views

CVE-2025-15047

A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack can be initiated remotely. The exploit h...

9.3CVSS6.5AI score0.01096EPSS
Exploits1References6
NVD
NVD
added 2025/12/23 10:15 p.m.6 views

CVE-2025-15046

A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the argument netmsk leads to stack-based buffer overflow. It is possible to launch the attack remotely. Th...

10CVSS0.00991EPSS
Exploits1References6
NVD
NVD
added 2025/12/23 10:15 p.m.4 views

CVE-2025-15047

A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack can be initiated remotely. The exploit h...

10CVSS0.01096EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/12/23 9:32 p.m.4 views

CVE-2025-15046 Tenda WH450 HTTP Request PPTPClient stack-based overflow

A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the argument netmsk leads to stack-based buffer overflow. It is possible to launch the attack remotely. Th...

10CVSS7AI score0.00991EPSS
Exploits1References6
CVE
CVE
added 2025/12/23 9:32 p.m.12 views

CVE-2025-15046

CVE-2025-15046 affects Tenda WH450 (firmware 1.0.0.18). The vulnerability lies in the HTTP Request Handler’s /goform/PPTPClient function, where manipulating the netmsk argument causes a stack-based buffer overflow. It can be exploited remotely, and public PoCs/exploits are described in the cited ...

10CVSS9.5AI score0.00991EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/12/23 9:2 p.m.3 views

CVE-2025-15045 Tenda WH450 HTTP Request Natlimit stack-based overflow

A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/Natlimit of the component HTTP Request Handler. This manipulation of the argument page causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has...

10CVSS6.9AI score0.00991EPSS
Exploits1References6
CVE
CVE
added 2025/12/23 9:2 p.m.10 views

CVE-2025-15045

CVE-2025-15045 affects Tenda WH450 1.0.0.18. The vulnerability lies in the HTTP Request Handler’s Natlimit function, where manipulating the page argument triggers a stack-based buffer overflow. The flaw allows remote initiation and, per sources, an exploit has been published and may be used. Seve...

10CVSS6.9AI score0.00991EPSS
Exploits1References6Affected Software1
RedhatCVE
RedhatCVE
added 2025/12/23 2:45 a.m.8 views

CVE-2025-15007

A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely...

10CVSS7.1AI score0.0086EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.2 views

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from an incorrect manipulation of the parameter page in the file/goform/Natlimit of the component HTTP Request Handler, which could result in a stack buffer...

10CVSS9.7AI score0.00991EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.3 views

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from an incorrect manipulation of the parameter netmsk in the file/goform/PPTPClient of the component HTTP Request Handler, which may result in a stack buffer...

10CVSS9.7AI score0.00991EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/12/23 12:0 a.m.4 views

Tenda WH450 安全漏洞

Tenda WH450 is a wireless access point from Tenda China. A security vulnerability exists in Tenda WH450 version 1.0.0.18, which originates from an incorrect manipulation of the parameter Username in the file/goform/PPTPDClient of the component HTTP Request Handler, which could result in a stack...

10CVSS9.7AI score0.01096EPSS
Exploits1References7
Rows per page
Query Builder