CVE-2024-4510

Ruijie RG-UAC up to 20240428 is affected by an OS command injection in the file /view/networkConfig/ArpTable/arp_add_commit.php, triggered by manipulating the text_ip_addr/text_mac_addr arguments. Exploitation can occur remotely and has been disclosed publicly. Effective root cause: improper hand...

CVE-2024-4502

Ruijie RG-UAC (up to 20240428) contains an OS command injection in the file /view/dhcp/dhcpClient/dhcp_client_commit.php via manipulation of the ifName argument. This affects the product’s DHCP client handling and can be triggered remotely. PUBLIC disclosure/exploit has been noted. The precise af...

CVE-2024-4491

CVE-2024-4491 affects Tenda i21 1.0.0.14(4656). The vulnerability is in the function formGetDiagnoseInfo, where improper validation of the cmdinput parameter leads to a stack-based buffer overflow. It can be triggered remotely, and the exploit has been publicly disclosed. Reported impacts include...

CVE-2024-4256

Techkshetra Info Solutions Savsoft Quiz 6.0 has a cross-site scripting (XSS) vulnerability in the Category Page editCategory function (/public/index.php/Qbank/editCategory). The issue arises from manipulating the category_name parameter with input like >, which allows script execution in the c...

CVE-2024-4248 Tenda i21 formQosManage_user stack-based overflow

A vulnerability was found in Tenda i21 1.0.0.144656 and classified as critical. This issue affects the function formQosManageuser. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack may be initiated remotely. The associated identifier of this vulnerability...

CVE-2024-4247 Tenda i21 formQosManage_auto stack-based overflow

A vulnerability has been found in Tenda i21 1.0.0.144656 and classified as critical. This vulnerability affects the function formQosManageauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. VDB-262138 is the identifier...

CVE-2024-4243 Tenda W9 wifiSSIDset formwrlSSIDset stack-based overflow

A vulnerability classified as critical has been found in Tenda W9 1.0.0.74456. Affected is the function formwrlSSIDset of the file /goform/wifiSSIDset. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has be...

CVE-2024-4241 Tenda W9 formQosManageDouble_auto stack-based overflow

A vulnerability was found in Tenda W9 1.0.0.74456. It has been declared as critical. This vulnerability affects the function formQosManageDoubleauto. The manipulation of the argument ssidIndex leads to stack-based buffer overflow. The attack can be initiated remotely. The identifier of this...

CVE-2024-4235

The CVE-2024-4235 entry concerns Netgear DG834Gv5 (Web Management Interface) with a vulnerability that allows cleartext storage of sensitive information. Affects version 1.6.01.34, enabling remote exploitation and reportedly with a publicly disclosed exploit. Multiple sources confirm an informati...

CVE-2024-4168 Tenda 4G300 sub_4260F0 stack-based overflow

A vulnerability was found in Tenda 4G300 1.01.42. It has been classified as critical. This affects the function sub4260F0. The manipulation of the argument upfilen leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The associated identifier of this vulnerability...

CVE-2024-4164 Tenda G3 ModifyPppAuthWhiteMac formModifyPppAuthWhiteMac stack-based overflow

A vulnerability, which was classified as critical, has been found in Tenda G3 15.11.0.179502. This issue affects the function formModifyPppAuthWhiteMac of the file /goform/ModifyPppAuthWhiteMac. The manipulation of the argument pppoeServerWhiteMacIndex leads to stack-based buffer overflow. The...

unbound: NRDelegation attack leads to uncontrolled resource consumption (Non-Responsive Delegation Attack)

A vulnerability was found in unbound. The attack can cause a resolver to spend a lot of time and resources resolving records under a malicious delegation point where a considerable number of unresponsive NS records reside. This issue can trigger high CPU usage in some resolver implementations tha...

CVE-2024-4126

CVE-2024-4126 affects Tenda W15E devices running 15.11.0.14. The vulnerability is a stack-based buffer overflow in the formSetSysTimeCfg component’s SetSysTimeCfg, triggered by manipulating the manualTime argument. It appears exploitable remotely and has been publicly disclosed. The CVSS metrics ...

CVE-2024-4115

A vulnerability, which was classified as critical, was found in Tenda W15E 15.11.0.14. Affected is the function formAddDnsForward of the file /goform/AddDnsForward. The manipulation of the argument DnsForwardRule leads to stack-based buffer overflow. It is possible to launch the attack remotely...

CVE-2024-4116

CVE-2024-4116 affects Tenda W15E firmware 15.11.0.14. The vulnerability resides in the function formDelDhcpRule in /goform/DelDhcpRule, where manipulating the delDhcpIndex argument leads to a stack-based buffer overflow. The issue is exploitable remotely and has public disclosure. Impact includes...

CVE-2024-4115

The CVE-2024-4115 entry concerns Tenda W15E firmware 15.11.0.14. A stack-based buffer overflow is triggered via the DnsForwardRule parameter in the /goform/AddDnsForward endpoint, specifically in the formAddDnsForward function. This vulnerability can be exploited remotely and has public exploit i...

CVE-2024-4111 Tenda TX9 SetLEDCfg sub_42BD7C stack-based overflow

A vulnerability was found in Tenda TX9 22.03.02.10. It has been rated as critical. Affected by this issue is the function sub42BD7C of the file /goform/SetLEDCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been...

CVE-2024-4066

CVE-2024-4066 affects Tenda AC8 firmware 16.03.34.09. The vulnerability exists in function fromAdvSetMacMtuWan (file /goform/AdvSetMacMtuWan) where manipulating arguments wanMTU/wanSpeed/cloneType/mac/serviceName/serverName triggers a stack-based buffer overflow. It is exploitable remotely and pu...

CVE-2024-3910

A vulnerability, which was classified as critical, has been found in Tenda AC500 2.0.1.91307. Affected by this issue is the function fromDhcpListClient of the file /goform/DhcpListClient. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched...

CVE-2024-3910

CVE-2024-3910 affects Tenda AC500 2.0.1.9(1307). The flaw is in the fromDhcpListClient function (file /goform/DhcpListClient) where manipulating the page parameter causes a stack-based buffer overflow. Impact is described as remote code execution with high severity/impact across confidentiality, ...