CVE-2025-3266

CVE-2025-3266 affects qinguoyi TinyWebServer (up to 1.0). The root cause is a stack-based buffer overflow in the handling of the name/password arguments within the HTTP connection path (specifically in /http/http_conn.cpp). This vulnerability potentially enables remote exploitation with the attac...

CVE-2025-3267

CVE-2025-3267 affects qinguoyi TinyWebServer up to version 1.0. The vulnerability lies in the file /http/http_conn.cpp where manipulation of the name/password arguments leads to an SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly. Multiple sources class...

CVE-2025-3268

The CVE-2025-3268 entry concerns qinguoyi TinyWebServer (up to version 1.0). The issue is in the HTTP pathway (http/http_conn.cpp) where manipulation of the m_url_real argument leads to improper authentication, enabling a remote attack. Several connected sources (Red Hat, NVD, VulDB ecosystem, PT...