CVE-2026-2529

A security flaw has been discovered in Wavlink WL-WN579A3 up to 20210219. Affected by this issue is the function DeleteMac of the file /cgi-bin/wireless.cgi. The manipulation of the argument deletelist results in command injection. The attack can be executed remotely. The vendor was contacted ear...

Tenda PA6 Wi-Fi Powerline extender buffer overflow vulnerability

Tenda PA6 Wi-Fi Powerline extender is a wireless network range extender from Tenda China. A buffer overflow vulnerability exists in the 'Wireless' section of the Web-UI in the Tenda PA6 Wi-Fi Powerline extender version 1.0.1.21. An attacker could exploit this vulnerability to execute arbitrary co...

CVE-2019-19505

Tenda PA6 Wi-Fi Powerline extender 1.0.1.21 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the "Wireless" section in the web-UI. By sending a specially crafted hostname, a remote attacker could overflow a buffer and execute arbitrary code on the system or...