CVE-2025-11526

A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifichkHz results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public...

CVE-2025-11526 Tenda AC7 WifiMacFilterSet stack-based overflow

A vulnerability was found in Tenda AC7 15.03.06.44. The affected element is an unknown function of the file /goform/WifiMacFilterSet. Performing a manipulation of the argument wifichkHz results in stack-based buffer overflow. The attack may be initiated remotely. The exploit has been made public...

CVE-2025-11525

A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-11525

A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

EUVD-2025-33269

A vulnerability has been found in Tenda AC7 15.03.06.44. Impacted is an unknown function of the file /goform/SetUpnpCfg. Such manipulation of the argument upnpEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-11525

CVE-2025-11525 affects Tenda AC7 (firmware 15.03.06.44). The issue is a stack-based buffer overflow in the /goform/SetUpnpCfg handler caused by improper validation of the upnpEn parameter. Attackers can exploit remotely to execute arbitrary code or cause denial of service; public exploits/poC hav...

EUVD-2025-33268

A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-11524

CVE-2025-11524 affects Tenda AC7 routers (firmware 15.03.06.44). The defect is a stack-based buffer overflow in /goform/SetDDNSCfg via the ddnsEn parameter, enabling remote code execution (exploit published; PoC/attacks possible). Exploit maturity: PoC. Remediation: update to a newer firmware ver...

CVE-2025-11524 Tenda AC7 SetDDNSCfg stack-based overflow

A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used...

PT-2025-41326

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow exists in Tenda AC7 routers due to improper processing of the ddnsEn argument within the /goform/SetDDNSCfg file. This manipulation allows for remote code execution. The...

PT-2025-41327

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow exists in Tenda AC7 version 15.03.06.44. The issue is due to the manipulation of the upnpEn parameter within the /goform/SetUpnpCfg file. This allows for remote...

PT-2025-41333

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow can occur due to manipulation of the Password argument within the /goform/fast setting pppoe set file. This issue allows for remote exploitation. The exploit has been...

PT-2025-41332

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow exists due to manipulation of the wifi chkHz argument in the /goform/WifiMacFilterSet file. This issue can be triggered remotely. The exploit has been made public...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2025-61577

The D-Link DIR-816A2 router, specifically running firmware version FWv1.10CNB05 , is vulnerable to a stack-based buffer overflow . The root cause is the dir_setWanWifi function's failure to properly validate the length and size of input data provided via the statuscheckpppoeuser parameter. An att...

PT-2025-41393

Name of the Vulnerable Software and Affected Versions D-Link DIR-816A2 version FWv1.10CNB05 Description The D-Link DIR-816A2 firmware version FWv1.10CNB05 contains a stack overflow issue. This occurs through the statuscheckpppoeuser parameter within the dir setWanWifi function. A crafted input to...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2025-46845

Name of the Vulnerable Software and Affected Versions ToToLink LR1200GB versions 9.1.0u.6619 B20230130 ToToLink NR1800X versions 9.1.0u.6681 B20230703 Description A stack buffer overflow issue exists in the ToToLink routers. The web interface reads the lang parameter and constructs Help URL strin...

The vulnerability in the downloadFile.cgi script of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R router microprogramming systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the downloadFile.cgi script in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the control traffic micro-atom of the BIG-IP Access Policy Manager allows a intruder to cause a service failure.

The vulnerability of the control traffic management micro-atom of the BIG-IP Access Policy Manager lies in buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...