CVE-2023-49428: Improper Neutralization of Special Elements used in a Command

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

CVE-2023-49429: Improper Neutralization of Special Elements used in an SQL Command

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

CVE-2023-49431: Improper Neutralization of Special Elements used in a Command

Tenda AX9 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

CVE-2023-49429

Tenda AX9 V22.03.01.46 was discovered to contain a SQL command injection vulnerability in the 'setDeviceInfo' feature through the 'mac' parameter at /goform/setModules...

Tenda AX9 security vulnerabilities

Tenda AX9 is a Wi-Fi 6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX9 version V22.03.01.46, which is caused by the "deviceList" parameter of /goform/setMacFilterCfg not properly validating the length of the input data. could be exploited by a remote attacker to execu...

Tenda AX12 security vulnerabilities

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A command execution vulnerability exists in Tenda AX12 version V22.03.01.46, which stems from the mac parameter of /goform/SetOnlineDevName failing to correctly filter constructed command special characters, commands, etc...

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

PT-2023-9117 · Tenda · Tenda Ax9

Name of the Vulnerable Software and Affected Versions: Tenda AX9 version V22.03.01.46 Description: The issue is related to a stack overflow vulnerability in the deviceList parameter at the "/goform/setMacFilterCfg" API endpoint. This vulnerability can be exploited by a remote attacker to execute...

CVE-2023-49428

Tenda AX12 V22.03.01.46 has been discovered to contain a command injection vulnerability in the 'mac' parameter at /goform/SetOnlineDevName...

PT-2023-7508 · Tenda · Tenda Ax12

Name of the Vulnerable Software and Affected Versions: Tenda AX12 version V22.03.01.46 Description: The issue is related to a command injection vulnerability in the mac parameter at the "/goform/SetOnlineDevName" API endpoint. This vulnerability is due to the lack of input validation when...

CVE-2023-49429

CVE-2023-49429 affects Tenda AX9, specifically version V22.03.01.46. Public records across multiple sources describe a SQL command injection in the /goform/setModules endpoint via the mac parameter in setDeviceInfo, enabling arbitrary command execution on successful exploitation. The vulnerabilit...

Tenda AX12 security vulnerabilities

Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the deviceList parameter at /goform/setMacFilterCfg failing to...

CVE-2023-49428

CVE-2023-49428 involves a command-injection vulnerability in the Tenda AX12 router (V22.03.01.46) via the mac parameter in the /goform/SetOnlineDevName endpoint. The root cause is insufficient input validation for the mac parameter, enabling arbitrary command execution. The vulnerability is descr...

Devolutions Remote Desktop Manager Code Injection Vulnerability

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager macOS version 2023.3.9.3 and earlier versions. An attacker could exploit the vulnerability to...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome prior to 120.0.6099.62 Linux , Mac, 120.0.6099.62/.63 Windows, which stems from a post-release reuse issue in Side Panel Search...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 120 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 120.0.6099.62 Linux and Mac, 120.0.6099.62/.63 Windows contains a number of fixes and improvements -- a list of changes is...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome before 120.0.6099.62 Linux, Mac, before 120.0.6099.62/.63 Windows, which stems from a post-release reuse issue in Media Stream...

Update your iPhones! Apple fixes two zero-days in iOS

Apple has released emergency security updates for iOS 17.1.2 and iPadOS 17.1.2 to patch for two zero-day vulnerabilities that may have been actively exploited. Apple said both vulnerabilities were in the WebKit component, which is the engine that powers Safari browser on Macs as well as all...

WebKit Code Execution

The vulnerability of the web page rendering module in WebKit operating systems for iOS, iPadOS, macOS, and the Safari browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to execute arbitrary code...

Tenda AX1803 formAddMacfilterRule Code Execution

The vulnerability of the formAddMacfilterRule function in the Tenda AX1803 networking device relates to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...