Lucene search
+L

101 matches found

CVE
CVE
•added 2026/05/02 5:29 a.m.•76 views

CVE-2026-7049

CVE-2026-7049 concerns the PixelYourSite Pro – Your smart PIXEL (TAG) Manager plugin for WordPress. All versions up to and including 12.5.0.1 are affected by a Server-Side Request Forgery via the scan_video parameter. The vulnerability allows unauthenticated attackers to cause the web application...

7.2CVSS5.9AI score0.00496EPSS
SaveExploits0References10
Cvelist
Cvelist
•added 2026/05/02 5:29 a.m.•46 views

CVE-2026-7049 PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter

The PixelYourSite Pro – Your smart PIXEL TAG Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1 via the scanvideo. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating fro...

7.2CVSS0.00496EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/05/02 5:29 a.m.•10 views

CVE-2026-7049 PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter

The PixelYourSite Pro – Your smart PIXEL TAG Manager plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 12.5.0.1 via the scanvideo. This makes it possible for unauthenticated attackers to make web requests to arbitrary locations originating fro...

7.2CVSS5.9AI score0.00496EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/01/09 12:34 p.m.•14 views

CVE-2023-45482

Tenda AC10 version USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via the urls parameter in the function getparentControllistInfo...

9.8CVSS7.9AI score0.00976EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/09 11:24 a.m.•19 views

CVE-2021-31624

Buffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.196318, and AC9 V3.0 V15.03.06.42multi, allows attackers to execute arbitrary code via the urls parameter...

8.8CVSS7.9AI score0.01144EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/21 12:18 a.m.•26 views

CVE-2025-65223

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo...

4.3CVSS7.2AI score0.00294EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/20 3:17 p.m.•19 views

CVE-2025-65223

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo...

4.3CVSS0.00294EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/20 3:17 p.m.•13 views

CVE-2025-65223

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo...

4.3CVSS5.8AI score0.00294EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/20 12:00 a.m.•1 views

CVE-2025-65223: Stack-based Buffer Overflow

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo...

4.3CVSS5.9AI score0.00294EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/20 12:00 a.m.•15 views

EUVD-2025-198266

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo...

4.3CVSS6.7AI score0.00294EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/20 12:00 a.m.•32 views

PT-2025-47588

Name of the Vulnerable Software and Affected Versions Tenda AC21 version 16.03.08.16 Description The Tenda AC21 router version 16.03.08.16 contains a buffer overflow issue. This occurs through the urls parameter of the ''/goform/saveParentControlInfo'' API endpoint. The vulnerability is triggered...

4.3CVSS7.2AI score0.00294EPSS
SaveExploits1References8
CVE
CVE
•added 2025/11/20 12:00 a.m.•45 views

CVE-2025-65223

The Tenda AC21 router (firmware V16.03.08.16 ) is vulnerable to a Stack-based Buffer Overflow (CWE-121) within the httpd-demon service. The flaw exists in the /goform/saveParentControlInfo endpoint due to a failure to properly validate the length and size of the urls parameter. A malicious actor ...

4.3CVSS5.7AI score0.00294EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/11 12:11 a.m.•16 views

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.6AI score0.0037EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/10 9:30 p.m.•13 views

EUVD-2025-50808

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.1AI score0.0037EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2025/11/10 12:00 a.m.•24 views

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

0.0037EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/11/10 12:00 a.m.•6 views

CVE-2025-63149

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.2AI score0.0037EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/10 12:00 a.m.•5 views

CVE-2025-63149: Stack-based Buffer Overflow

Tenda AX3 V16.03.12.10CN was discovered to contain a stack overflow in the urls parameter of the getparentControllistInfo function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS6AI score0.0037EPSS
SaveExploits1References1
CVE
CVE
•added 2025/11/10 12:00 a.m.•25 views

CVE-2025-63149

The Tenda AX3 Wi-Fi router, specifically running firmware version V16.03.12.10_CN , is susceptible to a stack-based buffer overflow vulnerability. The flaw resides in the get_parentControl_list_Info function, where the software fails to properly validate the length of the input data provided via ...

7.5CVSS7.2AI score0.0037EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2025/11/10 12:00 a.m.•15 views

Tenda AX3 安全漏洞

Tenda AX3 is a home dual-band Gigabit wireless router from Tenda Technology that supports Wi-Fi6 802.11ax standard and focuses on high-performance network coverage and stable connection. The Tenda AX3 suffers from a stack buffer overflow vulnerability that originates from the urls parameter in th...

7.5CVSS7.1AI score0.0037EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2022-40904

Malicious code in bioql PyPI...

9.8CVSS9.2AI score0.01128EPSS
SaveExploits1References1
Rows per page
Query Builder