26 matches found
EUVD-2025-22527
Malicious code in bioql PyPI...
EUVD-2022-30110
Malicious code in bioql PyPI...
EUVD-2022-30127
Malicious code in bioql PyPI...
CVE-2025-8160 Tenda AC20 httpd SetSysTimeCfg buffer overflow
A vulnerability classified as critical has been found in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/SetSysTimeCfg of the component httpd. The manipulation of the argument timeZone leads to buffer overflow. It is possible to launch the attack remotely. The...
CVE-2025-51085
Tenda AC8V4 V16.03.34.06 was discovered to contain stack overflow at /goform/SetSysTimeCfg. The manipulation of the argument timeZone and timeType leads to stack-based buffer overflow...
CVE-2025-50258
Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...
PT-2025-27800 · Tenda · Tenda Ac6
Name of the Vulnerable Software and Affected Versions: Tenda AC6 version 15.03.05.16 multi Description: The issue is related to a Buffer Overflow in the SetSysTimeCfg function via the time parameter. Recommendations: For Tenda AC6 version 15.03.05.16 multi, consider restricting access to the...
CVE-2025-50258
CVE-2025-50258 affects Tenda AC6 (v15.03.05.16_multi). The vulnerability is a buffer overflow in the SetSysTimeCfg function caused by unsafe handling of the time parameter. The available metrics rate the impact as high confidentiality, integrity, and availability, with network attack vector, high...
CVE-2025-50258
Tenda AC6 v15.03.05.16multi is vulnerable to Buffer Overflow in the SetSysTimeCfg function via the time parameter...
CVE-2024-8225 Tenda G3 SetSysTimeCfg formSetSysTime stack-based overflow
A vulnerability, which was classified as critical, was found in Tenda G3 15.11.0.20. Affected is the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument sysTimePolicy leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...
CVE-2024-4126 Tenda W15E SetSysTimeCfg formSetSysTime stack-based overflow
A vulnerability was found in Tenda W15E 15.11.0.14 and classified as critical. This issue affects the function formSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument manualTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...
CVE-2024-2856 Tenda AC10 SetSysTimeCfg fromSetSysTime stack-based overflow
A vulnerability, which was classified as critical, has been found in Tenda AC10 16.03.10.13/16.03.10.20. Affected by this issue is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone leads to stack-based buffer overflow. The attack may be...
CVE-2024-2855 Tenda AC15 SetSysTimeCfg fromSetSysTime stack-based overflow
A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.05.19/15.03.20. Affected by this vulnerability is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument time leads to stack-based buffer overflow. The attack can be launched...
CVE-2023-40898
Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg...
CVE-2023-24212
Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the timeType function at /goform/SetSysTimeCfg...
Stack overflow
Tenda TX3 USTX3V1.0brV16.03.13.11multiTDE01 was discovered to contain a stack overflow via the time parameter at /goform/SetSysTimeCfg...
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
Command injection
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
CVE-2022-36273
Tenda AC9 V15.03.2.21cn is vulnerable to command injection via goform/SetSysTimeCfg...
Stack overflow
There is a stack overflow vulnerability in the SetSysTimeCfg function in the httpd service of Tenda AC9 V15.03.2.21cn. The attacker can obtain a stable root shell through a constructed payload...