Lucene search
+L

1113 matches found

Vulnrichment
Vulnrichment
added 2025/10/27 6:22 a.m.4 views

CVE-2025-12233 Tenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow

A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

9CVSS8.7AI score0.04348EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/27 6:22 a.m.24 views

CVE-2025-12233 Tenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow

A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

9CVSS0.04348EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.10 views

PT-2025-43932

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromVirtualSer function within the /goform/VirtualSer file. Manipulation of the page argument can lead to a buffer overflow. Remote exploitation is possible. The exploit has been...

9.8CVSS6.6AI score0.00963EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.12 views

PT-2025-44040

CVE-2025-12322 pertains to a buffer overflow vulnerability found in Tenda CH22 1.0.0.1 routers. Specifically, the flaw exists within the fromNatStaticSetting function located in the /goform/NatStaticSetting endpoint. The vulnerability allows an attacker to manipulate the page argument through...

9CVSS7.4AI score0.00728EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2025/10/27 12:0 a.m.15 views

PT-2025-43890

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromSafeMacFilter function within the /goform/SafeMacFilter file. Manipulation of the page argument can trigger a buffer overflow. This issue can be exploited remotely. The exploit fo...

9CVSS6.8AI score0.00986EPSS
SaveExploits1References7
EUVD
EUVD
added 2025/10/24 6:31 p.m.7 views

EUVD-2025-35878

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the nextpage parameter in the function formDeviceReboot...

7.5CVSS7.3AI score0.00348EPSS
SaveExploits0References2
CNVD
CNVD
added 2025/10/24 12:0 a.m.9 views

Tenda AC6 DhcpListClient Function Buffer Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 version 15.03.06.50, which originates from the failure of the page parameter in the DhcpListClient function to correctly validate the length of the input data, and can be exploit...

7.5CVSS8.3AI score0.00456EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/10/24 12:0 a.m.11 views

PT-2025-43657

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow. This occurs through the next page parameter within the formDeviceReboot function. Recommendations At the moment, the...

7.5CVSS7AI score0.00348EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/10/23 12:17 a.m.17 views

CVE-2025-60338

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.6AI score0.00456EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/10/23 12:17 a.m.19 views

CVE-2025-60342

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS7.6AI score0.00394EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/10/22 6:30 p.m.7 views

EUVD-2025-35619

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.1AI score0.00394EPSS
SaveExploits1References2
NVD
NVD
added 2025/10/22 6:15 p.m.6 views

CVE-2025-60342

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS0.00394EPSS
SaveExploits1References1
NVD
NVD
added 2025/10/22 4:15 p.m.9 views

CVE-2025-60338

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.5CVSS0.00456EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/22 12:0 a.m.4 views

CVE-2025-60342

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.2AI score0.00394EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.10 views

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda, designed for 100 Gigabit fiber optic home users. The Tenda AC6 suffers from a stack buffer overflow vulnerability, which originates from the page parameter in the addressNat function failing to properly validate the length of the input data,...

7.5CVSS7.3AI score0.00394EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2025/10/22 12:0 a.m.16 views

CVE-2025-60342

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

0.00394EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/10/22 12:0 a.m.5 views

CVE-2025-60338

Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.2AI score0.00456EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/22 12:0 a.m.22 views

CVE-2025-60338

The CVE-2025-60338 entry is tied to the Tenda AC6 router (V2.0, 15.03.06.50) and describes a stack overflow in the DhcpListClient function’s page parameter. Multiple connected sources (CNVD-2025-26959, Red Hat CVE, CNNVD, CNNVD-202510-2830, PT-2025-43377, etc.) confirm a buffer/stack overflow tha...

7.5CVSS7.2AI score0.00456EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/10/13 9:27 p.m.22 views

CVE-2025-62361

WeGIA open redirect vulnerability (CVE-2025-62361) affects versions prior to 3.5.0, in the control.php endpoint via the nextPage parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle). This flaw can redirect users to arbitrary external domains, enabling phishing or credential theft as descr...

6.1CVSS6.4AI score0.00208EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/10/08 10:45 a.m.2 views

CVE-2025-10351 SQL injection vulnerability in Melis Platform

SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...

9.3CVSS7.6AI score0.00385EPSS
SaveExploits2References2
Rows per page
Query Builder