Tenda FH451 安全漏洞

The Tenda FH451 is a router produced by the Chinese company Tenda. Version 1.0.0.9 of the Tenda FH451 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters “wanmode” and “PPPOEPassword” in the file/goform/AdvSetWan, which may lead to a stack buffer...

CVE-2026-3398

A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Executing a manipulation of the argument wanmode/PPPOEPassword can lead to buffer overflow. The attack can be launched remotely. The exploit has been...

EUVD-2026-9131

A vulnerability was determined in Tenda F453 1.0.0.3. Affected is the function fromAdvSetWan of the file /goform/AdvSetWan of the component httpd. Executing a manipulation of the argument wanmode/PPPOEPassword can lead to buffer overflow. The attack can be launched remotely. The exploit has been...

Tenda F453 安全漏洞

The Tenda F453 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.3 of the Tenda F453 contains a security vulnerability. This vulnerability stems from incorrect handling of parameters “wanmode” and “PPPOEPassword” in the httpd component’s “goform/AdvSetWan” file, which may...

VulnCheck KEV: CVE-2025-7081

A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. Affected by this vulnerability is the function formSetWanStatic of the file /goform/formSetWanStatic of the component webs. The manipulation of the argument...

CVE-2025-56111

OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the networksetwanconf in file /usr/lib/lua/luci/controller/admin/netport.lua...

CVE-2025-56111

Affected software: Ruijie RG-BCR RG-BCR860. Issue: OS Command Injection in the netport.lua handler when processing crafted POST to network_set_wan_conf. Impact: attackers can execute arbitrary commands with high severity (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Affected file: /usr/lib/lua...

CVE-2025-14208

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2025-14208 D-Link DIR-823X set_wan_settings sub_415028 command injection

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

EUVD-2025-201619

A security flaw has been discovered in D-Link DIR-823X up to 20250416. This affects the function sub415028 of the file /goform/setwansettings. The manipulation of the argument pppusername results in command injection. It is possible to launch the attack remotely. The exploit has been released to...

CVE-2025-14208

CVE-2025-14208 affects D-Link DIR-823X devices up to 20250416. The vulnerability resides in the function sub_415028 of /goform/set_wan_settings, where manipulating the argument ppp_username leads to command injection. Exploitation can be performed remotely, and public proof-of-concept/exploit mat...

D-Link DIR-823X 命令注入漏洞

The D-Link DIR-823X is a wireless router from China-based AUO D-Link. A command injection vulnerability exists in the D-Link DIR-823X 20250416 and earlier versions, which stems from incorrect manipulation of the parameter pppusername in the file /goform/setwansettings, which can lead to command...

EUVD-2023-53375

Malicious code in bioql PyPI...

CVE-2025-8830

A vulnerability has been found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected by this issue is the function sub3517C of the file /goform/setWan. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The...

The vulnerability of the formSetWanNonLogin() function in the embedded web server software of D-Link DIR-513 routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetWanNonLogin function in the embedded web server software of D-Link DIR-513 routers is related to the issue of data being written outside the buffer in memory when processing the curTime parameter. Exploiting this vulnerability could allow a remote attacker to execu...

CVE-2023-31569

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection via the setWanCfg function...

The vulnerability of the formSetWAN_Wizard534 function in D-Link DIR-605L router microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the formSetWANWizard534 function in the microprogramming software for D-Link DIR-605L routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using the...

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the setWAN function in the microprogramming software for EDIMAX RE11S routers lies in the copying of buffers without checking the size of the input data during the processing of the pppUserName parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 software allows a hacker to execute arbitrary code.

The vulnerability of the SetWanSettings module in D-Link DIR-853 A1 router microprogramming software is related to buffer overflow when processing the Password parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a router from China-based AUO D-Link. The D-Link DIR-853 suffers from a buffer overflow vulnerability that stems from the Password parameter in the SetWanSettings module not properly handling user input. No details of the vulnerability are provided at this time...