1113 matches found
CVE-2025-12233 Tenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2025-12233 Tenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow
A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
PT-2025-43932
Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromVirtualSer function within the /goform/VirtualSer file. Manipulation of the page argument can lead to a buffer overflow. Remote exploitation is possible. The exploit has been...
PT-2025-44040
CVE-2025-12322 pertains to a buffer overflow vulnerability found in Tenda CH22 1.0.0.1 routers. Specifically, the flaw exists within the fromNatStaticSetting function located in the /goform/NatStaticSetting endpoint. The vulnerability allows an attacker to manipulate the page argument through...
PT-2025-43890
Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A flaw exists in the fromSafeMacFilter function within the /goform/SafeMacFilter file. Manipulation of the page argument can trigger a buffer overflow. This issue can be exploited remotely. The exploit fo...
EUVD-2025-35878
D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the nextpage parameter in the function formDeviceReboot...
Tenda AC6 DhcpListClient Function Buffer Overflow Vulnerability
The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 version 15.03.06.50, which originates from the failure of the page parameter in the DhcpListClient function to correctly validate the length of the input data, and can be exploit...
PT-2025-43657
Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax device, version FW116WWb01, contains a buffer overflow. This occurs through the next page parameter within the formDeviceReboot function. Recommendations At the moment, the...
CVE-2025-60338
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60342
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2025-35619
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60342
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60338
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60342
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
Tenda AC6 安全漏洞
Tenda AC6 is a dual-band wireless router from Tenda, designed for 100 Gigabit fiber optic home users. The Tenda AC6 suffers from a stack buffer overflow vulnerability, which originates from the page parameter in the addressNat function failing to properly validate the length of the input data,...
CVE-2025-60342
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60338
Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-60338
The CVE-2025-60338 entry is tied to the Tenda AC6 router (V2.0, 15.03.06.50) and describes a stack overflow in the DhcpListClient function’s page parameter. Multiple connected sources (CNVD-2025-26959, Red Hat CVE, CNNVD, CNNVD-202510-2830, PT-2025-43377, etc.) confirm a buffer/stack overflow tha...
CVE-2025-62361
WeGIA open redirect vulnerability (CVE-2025-62361) affects versions prior to 3.5.0, in the control.php endpoint via the nextPage parameter (metodo=listarTodos nomeClasse=AlmoxarifeControle). This flaw can redirect users to arbitrary external domains, enabling phishing or credential theft as descr...
CVE-2025-10351 SQL injection vulnerability in Melis Platform
SQL injection vulnerability based on the melis-cms module of the Melis platform from Melis Technology. This vulnerability allows an attacker to retrieve, create, update, and delete databases through the 'idPage' parameter in the '/melis/MelisCms/PageEdition/getTinyTemplates' endpoint...