CVE-2024-44565

CVE-2024-44565 affects Tenda AX1806 v1.0.0.1, where a stack overflow is triggered by the serverName parameter in the form_fast_setting_internet_set function. The root cause is input length validation of serverName, leading to a potential crash or arbitrary code execution. Publicly cited sources d...

CVE-2024-44565

Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function formfastsettinginternetset...

CVE-2024-44565: Out-of-bounds Write

Tenda AX1806 v1.0.0.1 contains a stack overflow via the serverName parameter in the function formfastsettinginternetset...

PT-2024-5117

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: A critical issue has been found in the function formSetSysToolDDNS of the file /goform/SetDDNSCfg. The manipulation of the arguments serverName, ddnsUser, ddnsPwd, ddnsDomain leads to a stack-based...

CVE-2024-30621

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...

CVE-2024-30621

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...

Tenda AX1803 安全漏洞

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A security vulnerability exists in Tenda AX1803 version v1.0.0.1, which originates from a discovery containing a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...

PT-2024-6577 · Tenda · Tenda Ax1803

Name of the Vulnerable Software and Affected Versions: Tenda AX1803 version 1.0.0.1 Description: The issue is related to a stack overflow in the fromAdvSetMacMtuWan function, specifically via the serverName parameter. This can be exploited by sending specially crafted POST requests, potentially...

CVE-2024-30621

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...

CVE-2024-30621

CVE-2024-30621 affects Tenda AX1803 v1.0.0.1, with a stack overflow in the fromAdvSetMacMtuWan function exploitable via the serverName parameter. Documented impact includes potential effects on confidentiality, integrity, and availability. The issue is described across multiple sources (NVD/Red H...

CVE-2024-30621

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...

CVE-2024-30621: Out-of-bounds Write

Tenda AX1803 v1.0.0.1 contains a stack overflow via the serverName parameter in the function fromAdvSetMacMtuWan...

CVE-2023-48974

Cross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted script to the serverNameinput parameter...

PT-2024-13666 · Axigen · Axigen Webmail

Name of the Vulnerable Software and Affected Versions: Axigen WebMail versions prior to 10.3.3.61 Description: The issue allows a remote attacker to escalate privileges via a crafted script to the serverName input parameter. This is a Cross Site Scripting vulnerability. Recommendations: For...

Netgear SRX5308 Router XSS

The vulnerability in the web interface of Netgear SRX5308 integrated software routers exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by sending a specially crafted HTTP...

SUSE CVE-2014-6060

The getoption function in dhcpcd 4.0.0 through 6.x before 6.4.3 allows remote DHCP servers to cause a denial of service by resetting the DHOOPTIONSOVERLOADED option in the 1 bootfile or 2 servername section, which triggers the option to be processed again...

CVE-2022-48123

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function...

Command injection

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function...

TOTOLINK A7100RU 操作系统命令注入漏洞

The TOTOLINK A7100RU is a wireless router from China's Gion Electronics TOTOLINK. An operating system command injection vulnerability exists in the TOTOlink A7100RU version V7.4cu.2313B20191024, which stems from the servername parameter of the set/delStaticDhcpRules method containing a command...

CVE-2022-48123: Improper Neutralization of Special Elements used in an OS Command

TOTOlink A7100RU V7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function...