Lucene search
K

8 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/02 12:0 a.m.2 views

CVE-2026-24101

An issue was discovered in goform/formSetIptv in Tenda AC15V1.0 V15.03.05.18multi. When the condition is met, s11 will be passed into subB0488, concatenated into doSystemCmd. The value of s11 is not validated, potentially leading to a command injection vulnerability...

9.8CVSS5.9AI score0.01307EPSS
Exploits1References3
NVD
NVD
added 2024/08/26 4:15 p.m.15 views

CVE-2024-44555

Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function setIptvInfo...

9.8CVSS0.00223EPSS
Exploits1References1
CVE
CVE
added 2024/08/26 12:0 a.m.48 views

CVE-2024-44549

The CVE-2024-44549 affects Tenda AX1806 v1.0.0.1, where a stack overflow in formGetIptv can be triggered via the iptv.stb.port parameter. Reported impact includes potential high-severity outcomes (CVE metrics indicate critical/near-critical impacts for confidentiality, integrity, and availability...

9.8CVSS7.5AI score0.00113EPSS
Exploits1References1Affected Software1
CNVD
CNVD
added 2021/06/21 12:0 a.m.3 views

Command execution vulnerability in TamronOS IPTV system (CNVD-2021-46841)

TamronOS Tenglong.com was founded in 2008, is a professional technology company specializing in Linux routing, authentication billing, caching system, IPTV system, VOD system development. A command execution vulnerability exists in the TamronOS IPTV system, which can be exploited by an attacker t...

7.7AI score
Exploits0
NVD
NVD
added 2021/04/29 4:15 p.m.10 views

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

9.8CVSS0.03192EPSS
Exploits1References3
Prion
Prion
added 2021/04/29 4:15 p.m.10 views

Code injection

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

7.5CVSS9.7AI score0.03192EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2021/04/29 3:44 p.m.15 views

CVE-2021-30233

The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptvvlan parameter...

10AI score0.03192EPSS
Exploits1References3
Prion
Prion
added 2020/10/06 1:15 p.m.9 views

Hardcoded credentials

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can use hard-coded credentials in HTTP requests to perform any administrative task on the device including retrieving the device's configuration with the cleartext admin password, and...

5CVSS9.7AI score0.4218EPSS
Exploits3References3
Rows per page
Query Builder