CVE-2025-29101

The CVE-2025-29101 entry concerns Tenda AC8V4.0 with firmware version V16.03.34.06, where a stack overflow is triggered by the deviceid parameter in the get_parentControl_list_Info function. The vulnerability is documented as a stack overflow that can impact availability, and CNVD references pote...

The vulnerability of the function in bl_categires_help.php, a parental control function for Internet CTparental, allows a intruder to inject any code they desire.

The vulnerability of the CTparental parental control function in blcategireshelp.php exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a hacker to inject arbitrary code...