35 matches found
CVE-2026-3167
The advisory concerns CVE-2026-3167 affecting Tenda F453 with firmware 1.0.0.3. The vulnerability is in the httpd component, specifically the function formWebTypeLibrary in /goform/webtypelibrary, where manipulating the argument webSiteId causes a buffer overflow. This allows a remote attack, and...
Tenda F453 安全漏洞
The Tenda F453 is a wireless router produced by the Chinese company Tenda. Version 1.0.0.3 of the Tenda F453 contains a security vulnerability. This vulnerability stems from the improper handling of the parameter webSiteId by the formWebTypeLibrary function in the httpd component and the...
CVE-2025-14994
A flaw has been found in Tenda FH1201 and FH1206 1.2.0.14408/1.2.0.88155. This impacts the function strcat of the file /goform/webtypelibrary of the component HTTP Request Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack is possible to be carried...
Tenda FH1206和Tenda FH1201 安全漏洞
The Tenda FH1206 and Tenda FH1201 are both wireless routers from Tenda China. A security vulnerability exists in the Tenda FH1206 and Tenda FH1201 versions 1.2.0.14408 and 1.2.0.88155, which originates from the handling of the parameter webSiteId by the strcat function in the file...
Tenda FH451 formwebtypelibrary function buffer overflow vulnerability
The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability, which originates from the parameter webSiteId in the file /goform/webtypelibrary that fails to correctly validate the length of the input data, which can be...
The vulnerability of the formWebTypeLibrary() function in the Tenda FH451 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the formWebTypeLibrary function in the Tenda FH451 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the webSiteId parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code o...
CVE-2025-7793
A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. The manipulation of the argument webSiteId leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit...
CVE-2025-7793
A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. The manipulation of the argument webSiteId leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit...
CVE-2025-7793
CVE-2025-7793 affects Tenda FH451 (version 1.0.0.9). The vulnerability is in the formWebTypeLibrary function in /goform/webtypelibrary, where manipulating the webSiteId argument causes a stack-based buffer overflow. This enables remote exploitation and, per sources, the exploit has been publicly ...
CVE-2025-7793: Stack-based Buffer Overflow
A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. The manipulation of the argument webSiteId leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit...
SQL Injection Vulnerability in Websiteid Parameter of Government Information System of Beijing Xiangyu Leading Software Co.
One-stop government information disclosure system is a management system that realizes the construction of open government columns based on website groups. There is a SQL injection vulnerability in the websiteid parameter of the one-stop government information disclosure system of Beijing Xiangyu...
Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities
No description provided by source. Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID:...
Onpub CMS 1.4/1.5 - Multiple SQL Injections
Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...
Onpub CMS 1.4 / 1.5 SQL Injection
Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-26 Vulnerability Laboratory ID VL-ID: ==================================...
Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities
Document Title: =============== Onpub CMS 1.4 & 1.5 - Multiple SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1120 Release Date: ============= 2013-10-25 Vulnerability Laboratory ID VL-ID: ==================================...