Exploit for CVE-2025-12596

Lab: CVE-2025-12596 - Buffer Overflow in Tenda AC23 Router...

Tenda AC23 安全漏洞

Tenda AC23 is a home dual-band wireless router launched by Tenda, focusing on large home coverage and high-speed transmission, supporting 802.11acWave2 technology, dual-band concurrent rate up to 2033Mbps. Tenda AC23 has a buffer overflow vulnerability, the vulnerability stems from the parameter...

Tenda AX-3 安全漏洞

Tenda AX-3 is a home smart wireless router from Tenda that supports Wi-Fi6 802.11ax standard for home networking environment. The Tenda AX-3 suffers from a stack buffer overflow vulnerability that originates from the deviceId parameter in the getparentControllistInfo function failing to properly...

EUVD-2023-49774

Malicious code in bioql PyPI...

EUVD-2023-37831

Malicious code in bioql PyPI...

EUVD-2025-24670

Malicious code in bioql PyPI...

EUVD-2025-26203

Malicious code in bioql PyPI...

EUVD-2025-22525

Malicious code in bioql PyPI...

EUVD-2025-25541

Malicious code in bioql PyPI...

EUVD-2025-27589

Malicious code in bioql PyPI...

EUVD-2025-27216

Malicious code in bioql PyPI...

CVE-2025-10120

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...

PT-2025-37061

Name of the Vulnerable Software and Affected Versions: Tenda F3 versions 12.01.01.48 multi and after Description: Tenda F3 versions 12.01.01.48 multi and after are susceptible to a buffer overflow issue through the onlineList parameter in the goform/setParentControl component. Recommendations: At...

CVE-2025-10120

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2025-10120 Tenda AC20 GetParentControlInfo strcpy buffer overflow

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...

Tenda AC20 安全漏洞

Tenda AC20 is a wireless router product from Tenda. A buffer overflow vulnerability exists in Tenda AC20 16.03.08.12 and earlier versions, which originates from the improper handling of the mac parameter in the strcpy function in the /goform/GetParentControlInfo file. The vulnerability can be...

TOTOLINK A702R /boafrm/formParentControl File Buffer Overflow Vulnerability

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability, which originates from the failure of the parameter submit-url in the file...

CVE-2025-9783 TOTOLINK A702R formParentControl sub_418030 buffer overflow

A vulnerability was determined in TOTOLINK A702R 4.0.0-B20211108.1423. This issue affects the function sub418030 of the file /boafrm/formParentControl. Executing manipulation of the argument submit-url can lead to buffer overflow. The attack may be launched remotely. The exploit has been publicly...

CVE-2025-9783

CVE-2025-9783 affects TOTOLINK A702R v4.0.0-B20211108.1423. The vulnerability targets the function sub_418030 in the file /boafrm/formParentControl. Attacker-controlled manipulation of the submit-url argument may trigger a buffer overflow, with remote attack potential. Public disclosures exist an...

TOTOLINK A702r 安全漏洞

TOTOLINK A702R is a wireless router device manufactured by China's Gion Electronics TOTOLINK, mainly used for home network connection and signal coverage. The TOTOLINK A702R suffers from a buffer overflow vulnerability, which originates from the failure of the parameter submit-url in the file...