CVE-2025-34108: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer overflow in the libspp.dll component...

CVE-2025-34107: Stack-based Buffer Overflow

A buffer overflow vulnerability exists in the WinaXe FTP Client version 7.7 within the FTP banner parsing functionality, WCMDPA10.dll. When the client connects to a remote FTP server and receives an overly long '220 Server Ready' response, the vulnerable component responsible for parsing the bann...

CVE-2025-34105: Improper Input Validation

A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specially crafted long URI, a remote...

CVE-2025-7603

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. Affected is an unknown function of the file /jingx.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploi...

CVE-2025-7597

A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-7551

A vulnerability was found in Tenda FH1201 1.2.0.14408. It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument modino/username leads to stack-based buffer overflow. The attack can be launche...

CVE-2025-7602: Stack-based Buffer Overflow

A vulnerability was found in D-Link DI-8100 16.07.26A1 and classified as critical. This issue affects some unknown processing of the file /arpsys.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has...

CVE-2025-7603: Stack-based Buffer Overflow

A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. Affected is an unknown function of the file /jingx.asp of the component HTTP Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploi...

CVE-2025-7596: Stack-based Buffer Overflow

A vulnerability was found in Tenda FH1205 2.0.0.7775. It has been rated as critical. This issue affects the function formWifiExtraSet of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be initiated remotely. The...

PT-2025-29979 · D Link · Di-8100

Name of the Vulnerable Software and Affected Versions: D-Link DI-8100 version 16.07.26A1 Description: A critical vulnerability exists in the D-Link DI-8100. The issue is related to unknown processing of the file /menu nat more.asp within the HTTP Request Handler component, leading to a stack-base...

CVE-2025-7598: Stack-based Buffer Overflow

A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /goform/setWifiFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched...

CVE-2025-7597: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda AX1803 1.0.0.1. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-7586: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC500 2.0.1.91307. It has been declared as critical. Affected by this vulnerability is the function formSetAPCfg of the file /goform/setWtpData. The manipulation of the argument radio2g1 leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2025-7551: Stack-based Buffer Overflow

A vulnerability was found in Tenda FH1201 1.2.0.14408. It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument modino/username leads to stack-based buffer overflow. The attack can be launche...

CVE-2025-7549

A vulnerability was found in Tenda FH1201 1.2.0.14408 and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2025-7550

A vulnerability was found in Tenda FH1201 1.2.0.14408. It has been classified as critical. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to stack-based buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-7549 Tenda FH1201 L7Prot frmL7ProtForm stack-based overflow

A vulnerability was found in Tenda FH1201 1.2.0.14408 and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2025-7548 Tenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflow

A vulnerability has been found in Tenda FH1201 1.2.0.14408 and classified as critical. This vulnerability affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2025-7531

CVE-2025-7531 affects Tenda FH1202, firmware 1.2.0.14(408). The vulnerability is in the fromPptpUserSetting function of /goform/PPTPUserSetting, where manipulating the delno argument fails to validate input length, causing a stack-based buffer overflow. This enables remote code execution or other...

CVE-2025-7529

A vulnerability classified as critical was found in Tenda FH1202 1.2.0.14408. Affected by this vulnerability is the function fromNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has...