2382 matches found
Tenda W12 security vulnerabilities
The W12 is a high-performance wireless access point from Tenda China. Ltd. W12 3.0.0.6 version of the existence of buffer overflow vulnerability, the vulnerability stems from the HTTP Request Handler component / goform/modules file wifiMacFilterSet function parameter mac failed to correctly...
CVE-2025-11550: NULL Pointer Dereference
A vulnerability was found in Tenda W12 3.0.0.63948. The impacted element is the function wifiScheduledSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument wifiScheduledSet results in null pointer dereference. The attack may be performed from...
PT-2025-41445
Name of the Vulnerable Software and Affected Versions Tenda W12 version 3.0.0.63948 Description A flaw exists in the Tenda W12 device that allows for a null pointer dereference. This issue is located within the wifiScheduledSet function of the HTTP Request Handler component, specifically in the...
PT-2025-41414
Name of the Vulnerable Software and Affected Versions Tenda W12 version 3.0.0.63948 Description A flaw exists in the Tenda W12 router firmware that allows for a remote stack-based buffer overflow. The issue is located in the wifiMacFilterSet function within the HTTP Request Handler component,...
CVE-2025-11444 TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launc...
CVE-2025-11444: Buffer Copy without Checking Size of Input
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launc...
CVE-2025-11418: Stack-based Buffer Overflow
A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mitssidindex leads to stack-based buffer overflow. The attack may be...
EUVD-2021-0890
Malware in sbrugna...
CVE-2025-11291: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...
CVE-2025-11272
A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...
CVE-2025-11272: Improper Authorization
A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...
EUVD-2025-2118
Malicious code in bioql PyPI...
EUVD-2023-12946
Malicious code in bioql PyPI...
EUVD-2025-2007
Malicious code in bioql PyPI...
EUVD-2025-18434
Malicious code in bioql PyPI...
EUVD-2023-59328
Malicious code in bioql PyPI...
EUVD-2023-59360
Malicious code in bioql PyPI...
EUVD-2022-51631
Malicious code in bioql PyPI...