993 matches found
CVE-2025-29121
The Tenda AC6 router (version 15.03.05.16 ) is susceptible to a stack-based buffer overflow vulnerability in the form_fast_setting_wifi_set function within the /goform/fast_setting_wifi_set file. The flaw occurs because the system fails to properly validate the length of input data when processin...
CVE-2025-29137
Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...
CVE-2025-29137
Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...
Tenda AC7 安全漏洞
Tenda AC7 is a wireless router from Tenda, a Chinese company. The Tenda AC7 suffers from a buffer overflow vulnerability that originates from the timeZone parameter of the formfastsettingwifiset function failing to properly validate the length of the input data, which can be exploited by an...
CVE-2025-29137: Buffer Copy without Checking Size of Input
Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...
CVE-2025-29137
Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...
CVE-2025-29137
Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the formfastsettingwifiset function, which can cause RCE...
[SECURITY] [DLA 4085-1] tzdata new timezone database
------------------------------------------------------------------------- Debian LTS Advisory DLA-4085-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 18, 2025 https://wiki.debian.org/LTS -...
DLA-4085-1 tzdata - new timezone database
Bulletin has no description...
CVE-2025-29360
Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...
CVE-2025-29360: Buffer Copy without Checking Size of Input
Tenda RX3 USRX3V1.0brV16.03.13.11multiTDE01 is vulnerable to Buffer Overflow via the time and timeZone parameters at /goform/SetSysTimeCfg. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted packet...
Recommended update for Maven
This update for Maven fixes the following issues: maven-dependency-analyzer was updated from version 1.13.2 to 1.15.1: Key changes across versions: Bug fixes and improved support of dynamic types Dependency upgrades ASM, Maven core, and notably the removal of commons-io Improved error handling by...
CVE-2024-32937
An os command injection vulnerability exists in the CWMP SelfDefinedTimeZone functionality of Grandstream GXP2135 1.0.9.129, 1.0.11.74 and 1.0.11.79. A specially crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of malicious packets to trigger this...
CVE-2024-53584
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter...
CVE-2024-53584
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter...
PT-2025-2971 · Openpanel · Openpanel
Name of the Vulnerable Software and Affected Versions: OpenPanel version 0.3.4 Description: A command injection vulnerability was discovered in OpenPanel, allowing an attacker to inject system commands via the timezone parameter. This issue can potentially be exploited to execute arbitrary system...
CVE-2024-53584: Improper Neutralization of Special Elements used in an OS Command
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter...
CVE-2024-53584
OpenPanel v0.3.4 was discovered to contain an OS command injection vulnerability via the timezone parameter...
CVE-2024-53584
OpenPanel v0.3.4 is affected by an OS command injection vulnerability (CWE-78) originating from the timezone parameter . An attacker can exploit this flaw to execute arbitrary system commands on the server. A proof-of-concept exploit is available, demonstrating command execution via a POST reques...