PT-2026-4802

Name of the Vulnerable Software and Affected Versions Shenzhen Tenda W30E V2 versions up to and including V16.01.0.195037 Description The device features an insecure Cross-Origin Resource Sharing CORS policy on authenticated administrative endpoints. The configuration sets...

PT-2026-4801

Shenzhen Tenda W30E V2 firmware versions up to and including V16.01.0.195037 lack cross-site request forgery CSRF protections on administrative endpoints, including those used to change administrator account credentials. As a result, an attacker can craft malicious requests that, when triggered b...

Tenda W30E cross-site scripting vulnerability

The Tenda W30E is a router produced by the Chinese company Tenda. Versions of the Tenda W30E such as V2 and V16.01.0.195037 had a cross-site scripting vulnerability. This vulnerability stemmed from insufficient input validation in user-created functions, which could lead to storage-based cross-si...

CVE-2023-50001

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formUpgradeMeshOnline...

CVE-2023-50002

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formRebootMeshNode...

CVE-2023-49403

Tenda W30E V16.01.0.124843 was discovered to contain a command injection vulnerability via the function setFixTools...

CVE-2023-49405

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function UploadCfg...

CVE-2023-49410

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function via the function setwanstatus...

CVE-2023-49406

Tenda W30E V16.01.0.124843 was discovered to contain a Command Execution vulnerability via the function /goform/telnet...

CVE-2023-49411

Tenda W30E V16.01.0.124843 contains a stack overflow vulnerability via the function formDeleteMeshNode...

CVE-2023-49402

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function localMsg...

CVE-2023-49404

Tenda W30E V16.01.0.124843 was discovered to contain a stack overflow via the function formAdvancedSetListSet...

EUVD-2025-27291

Malicious code in bioql PyPI...

EUVD-2022-48371

Malicious code in bioql PyPI...

EUVD-2022-48384

Malicious code in bioql PyPI...

EUVD-2022-48373

Malicious code in bioql PyPI...

EUVD-2022-48389

Malicious code in bioql PyPI...

EUVD-2022-48381

Malicious code in bioql PyPI...

EUVD-2022-48375

Malicious code in bioql PyPI...

EUVD-2022-48388

Malicious code in bioql PyPI...