CVE-2025-54401

Planet WGR-500 v1.3411b190912 contains stack-based buffer overflow vulnerabilities in the web server formPingCmd function. Specifically, CVE-2025-54401 stems from unsafe handling of the submit-url parameter copied into a 260-byte buffer (buffer_260) without bounds checking, with additional relate...

CVE-2025-54402

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2025-54402

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2025-54399

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

EUVD-2025-32709

A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to th...

CVE-2025-11389

A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to...

CVE-2025-11389 Tenda AC15 saveAutoQos stack-based overflow

A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to...

CVE-2025-11389 Tenda AC15 saveAutoQos stack-based overflow

A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to...

CVE-2025-11389

CVE-2025-11389 affects Tenda AC15 firmware 15.03.05.18. The vulnerability is a stack-based buffer overflow in an unknown function within /goform/saveAutoQos triggered by manipulating the enable parameter due to improper input length validation. It enables remote code execution with network attack...

CVE-2025-11389

A security flaw has been discovered in Tenda AC15 15.03.05.18. Affected is an unknown function of the file /goform/saveAutoQos. Performing a manipulation of the argument enable results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been released to...

CVE-2025-11388

A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2025-11387

A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fastsettingpppoeset. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may ...

CVE-2025-11388 Tenda AC15 setNotUpgrade stack-based overflow

A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2025-11388 Tenda AC15 setNotUpgrade stack-based overflow

A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2025-11388

CVE-2025-11388 affects Tenda AC15 firmware 15.03.05.18. The vulnerability originates in the /goform/setNotUpgrade handling of the newVersion parameter, where insufficient validation of input length leads to a stack-based buffer overflow. This flaw can be exploited remotely, with a publicly availa...

CVE-2025-11387 Tenda AC15 fast_setting_pppoe_set stack-based overflow

A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fastsettingpppoeset. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may ...

CVE-2025-11387

CVE-2025-11387 affects Tenda AC15 routers (AO: 15.03.05.18) via the function in /goform/fast_setting_pppoe_set. The vulnerability is a stack-based buffer overflow caused by manipulated Password input, and is exploitable remotely with a publicly disclosed exploit (PoC). Multiple sources corroborat...

CVE-2025-11386

CVE-2025-11386 affects Tenda AC15 router (firmware 15.03.05.18) via the POST handler in the /goform/SetDDNSCfg endpoint. The root cause is a stack-based buffer overflow triggered by manipulating the ddnsEn argument, indicating an input length validation failure in an unknown function of the POST ...

CVE-2025-11386 Tenda AC15 POST Parameter SetDDNSCfg stack-based overflow

A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit...

CVE-2025-11327

A security vulnerability has been detected in Tenda AC18 15.03.05.196318. This vulnerability affects unknown code of the file /goform/SetUpnpCfg. The manipulation of the argument upnpEn leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been...