12715 matches found
CVE-2025-29217
Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2025-29923
go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.2, go-redis potentially responds out of order when CLIENT SETINFO times out during connection establishment. This can happen when the client is configured to transmit its identity, there...
CVE-2025-29215
Tenda AX12 v22.03.01.46CN was discovered to contain a stack overflow via the sub43fdcc function at /goform/SetNetControlList...
CVE-2025-29214
Tenda AX12 v22.03.01.46CN was discovered to contain a stack overflow via the sub42F69C function at /goform/setMacFilterCfg...
Tenda W18E security vulnerabilities
The Tenda W18E is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W18E /goform/setModules handling of the wifiSSID parameter, which can be exploited by an attacker to submit a special request that can crash the application and cause a denial of...
D-Link DIR-605L and D-Link DIR-618 have security vulnerabilities
The D-Link DIR-605L and D-Link DIR-618 are both a wireless router from China-based AUO D-Link. An Access Control Error vulnerability exists in the D-Link DIR-618 version 2.02 and the D-Link DIR-605L version 3.02, which stems from improper access control of the file /goform/formSetPassword, and ca...
Tenda AX12 security vulnerabilities
Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. The Tenda AX12 suffers from a buffer overflow vulnerability that originates from the sub42F69C function in /goform/setMacFilterCfg that fails to correctly validate the length of the input data, which can be exploited by an...
Tenda W18E security vulnerabilities
The Tenda W18E is a wireless router from the Chinese company Tenda. A stack overflow vulnerability exists in the Tenda W18E /goform/setModules handling of the wifiPwd parameter, which can be exploited by an attacker to submit a special request that can crash the application and cause a denial of...
PT-2025-12361
Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 Description A issue was found that affects the functionality of the /goform/fast setting wifi set file. The use of the timeZone parameter causes a stack-based buffer overflow. Recommendations For Tenda AC6 version...
PT-2025-11692
Name of the Vulnerable Software and Affected Versions Tenda AC7 version V15.03.06.44 Description A buffer overflow issue is caused by the timeZone parameter in the form fast setting wifi set function, which can lead to remote code execution RCE. Recommendations For Tenda AC7 version V15.03.06.44,...
PT-2025-16658
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A shift-out-of-bounds issue has been resolved in the Linux kernel, specifically in the ntb hw switchtec module. The kernel API ntb mw clear trans would pass 0 to both addr and size,...
RLSA-2025:0936 Moderate: mingw-glib2 security update
GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: buffer overflow in...
ipset bug fix update
An update is available for ipset. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The ipset packages provide the ipset utility and the ipset service to manage IP...
PT-2025-11322
Name of the Vulnerable Software and Affected Versions: Zoorum Comments plugin for WordPress versions up to, and including, 0.9 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the zoorum set options function. This allows unauthenticat...
PT-2025-11244
Name of the Vulnerable Software and Affected Versions: LoginPress | wp-login Custom Login Page Customizer plugin for WordPress versions up to, and including, 3.3.1 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the custom plugin set...
UBUNTU-CVE-2024-11235
In PHP versions 8.3. before 8.3.19 and 8.4. before 8.4.5, a code sequence involving set handler or ??= operator and exceptions can lead to a use-after-free vulnerability. If the third party can control the memory layout leading to this, for example by supplying specially crafted inputs to the...
CVE-2025-29358
Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the firewallEn parameter at /goform/SetFirewallCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...
CVE-2025-29357
Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the startIp and endIp parameters at /goform/SetPptpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...
