deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-26304
Published: 2025-02-20
Description: A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.
CVSS Score: 8.2 (HIGH)
CWE: CWE-244
References: https://github.com/libming/libming/issues/323
CVE: CVE-2025-26305
Published: 2025-02-20
Description: A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
CVSS Score: 8.2 (HIGH)
CWE: CWE-244
References: https://github.com/libming/libming/issues/322
CVE: CVE-2025-26306
Published: 2025-02-20
Description: A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/libming/libming/issues/324; https://github.com/libming/libming/issues/324
CVE: CVE-2025-26307
Published: 2025-02-20
Description: A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/libming/libming/issues/325
CVE: CVE-2025-26308
Published: 2025-02-20
Description: A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/libming/libming/issues/326; https://github.com/libming/libming/issues/326
CVE: CVE-2025-26309
Published: 2025-02-20
Description: A memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/libming/libming/issues/327
CVE: CVE-2025-26310
Published: 2025-02-20
Description: Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE) in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted ABC file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/libming/libming/issues/328
CVE: CVE-2025-26311
Published: 2025-02-20
Description: Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted SWF file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-401
References: https://github.com/libming/libming/issues/329
CVE: CVE-2023-51333
Published: 2025-02-20
Description: PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://packetstorm.news/files/id/176511; https://www.phpjabbers.com/cinema-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176511/PHPJabbers-Cinema-Booking-System-1.0-CSV-Injection.html
CVE: CVE-2023-51334
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://packetstorm.news/files/id/176512; https://www.phpjabbers.com/cinema-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176512/PHPJabbers-Cinema-Booking-System-1.0-Missing-Rate-Limiting.html
CVE: CVE-2023-51335
Published: 2025-02-20
Description: PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176508; https://www.phpjabbers.com/cinema-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176508/PHPJabbers-Cinema-Booking-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2024-46933
Published: 2025-02-20
Description: An issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05.0014. Some BullSequana XH products were shipped without proper hardware programming, leading to a potential denial-of-service with privileged access.
CVSS Score: 7.7 (HIGH)
CWE: CWE-770
References: https://eviden.com; https://support.bull.com/ols/product/security/psirt/security-bulletins/ast2600-left-unconfigured-in-bullsequana-xh2140-psirt-270-tlp-clear-version-2-7-cve-2024-46933/view
CVE: CVE-2024-54958
Published: 2025-02-20
Description: Nagios XI 2024R1.2.2 is susceptible to a stored Cross-Site Scripting (XSS) vulnerability in the Tools page. This flaw allows an attacker to inject malicious scripts into the Tools interface, which are then stored and executed in the context of other users accessing the page.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54958
CVE: CVE-2024-54959
Published: 2025-02-20
Description: Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabling POST-based Cross-Site Scripting (XSS).
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54959
CVE: CVE-2024-54960
Published: 2025-02-20
Description: A SQL Injection vulnerability in Nagios XI 2024R1.2.2 allows a remote attacker to execute SQL injection via a crafted payload in the History Tab component.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54960
CVE: CVE-2024-54961
Published: 2025-02-20
Description: Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple pages displaying the usernames and email addresses of all current users.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54961
CVE: CVE-2024-55457
Published: 2025-02-20
Description: MasterSAM Star Gate 11 is vulnerable to directory traversal via /adama/adama/downloadService. An attacker can exploit this vulnerability by manipulating the file parameter to access arbitrary files on the server, potentially exposing sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/h13nh04ng/CVE-2024-55457-PoC
CVE: CVE-2025-1258
Published: 2025-02-20
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-25968
Published: 2025-02-20
Description: DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator credentials, by force browsing the endpoint and exploiting the 'file' parameter. By referencing specific files (e.g., cm3.xml), attackers can bypass access controls, leading to account takeover and potential privilege escalation.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: http://ddsn.com; https://github.com/padayali-JD/CVE-2025-25968
CVE: CVE-2025-25973
Published: 2025-02-20
Description: A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/coleak2021/512acaa12ba0987499d560967acff1d1; https://github.com/yandaozi/PPress/issues/3
CVE: CVE-2025-27091
Published: 2025-02-20
Description: OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence Parameter Set (SPS) memory allocation and a subsequent non Instantaneous Decoder Refresh (non-IDR) Network Abstraction Layer (NAL) unit memory usage. An attacker could exploit this vulnerability by crafting a malicious bitstream and tricking a victim user into processing an arbitrary video containing the malicious bistream. An exploit could allow the attacker to cause an unexpected crash in the victim's user decoding client and, possibly, perform arbitrary commands on the victim's host by abusing the heap overflow. This vulnerability affects OpenH264 2.5.0 and earlier releases. Both Scalable Video Coding (SVC) mode and Advanced Video Coding (AVC) mode are affected by this vulnerability. OpenH264 software releases 2.6.0 and later contained the fix for this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.

### For more information

If you have any questions or comments about this advisory:
* [Open an issue in cisco/openh264](https://github.com/cisco/openh264/issues)
* Email Cisco Open Source Security ([oss-security@cisco.com](mailto:oss-security@cisco.com)) and Cisco PSIRT ([psirt@cisco.com](mailto:psirt@cisco.com))

### Credits:

* **Research:** Octavian Guzu and Andrew Calvano of Meta
* **Fix ideation:** Philipp Hancke and Shyam Sadhwani of Meta
* **Fix implementation:** Benzheng Zhang (@BenzhengZhang)
* **Release engineering:** Benzheng Zhang (@BenzhengZhang)
CVSS Score: 7.5 (HIGH)
CWE: CWE-122, CWE-787
References: https://github.com/cisco/openh264/releases/tag/v2.6.0; https://github.com/cisco/openh264/security/advisories/GHSA-m99q-5j7x-7m9x
CVE: CVE-2023-51336
Published: 2025-02-20
Description: PHPJabbers Meeting Room Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options that is used to construct CSV file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-1236
References: https://packetstorm.news/files/id/176518; https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176518/PHPJabbers-Meeting-Room-Booking-System-1.0-CSV-Injection.html
CVE: CVE-2023-51337
Published: 2025-02-20
Description: PHPJabbers Event Ticketing System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in "lid" parameter in index.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176516; https://www.phpjabbers.com/event-ticketing-system/#sectionDemo; http://packetstormsecurity.com/files/176516/PHPJabbers-Event-Ticketing-System-1.0-Cross-Site-Scripting-HTML-Injection.html
CVE: CVE-2023-51338
Published: 2025-02-20
Description: PHPJabbers Meeting Room Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "title, name" parameters of&nbsp;index.php&nbsp;page.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://packetstorm.news/files/id/176517; https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo; http://packetstormsecurity.com/files/176517/PHPJabbers-Meeting-Room-Booking-System-1.0-Cross-Site-Scripting.html
CVE: CVE-2023-51339
Published: 2025-02-20
Description: A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Event Ticketing System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-770
References: https://packetstorm.news/files/id/176519; https://www.phpjabbers.com/event-ticketing-system/#sectionDemo; http://packetstormsecurity.com/files/176519/PHPJabbers-Event-Ticketing-System-1.0-Missing-Rate-Limiting.html
CVE: CVE-2024-7141
Published: 2025-02-20
Description: Versions of Gliffy Online prior to versions 4.14.0-7 contains a Cross Site Request Forgery (CSRF) flaw.
CWE: CWE-352
References: https://portal.perforce.com/s/detail/a91PA000001Sc8DYAS
CVE: CVE-2025-26618
Published: 2025-02-20
Description: Erlang is a programming language and runtime system for building massively scalable soft real-time systems with requirements on high availability. OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang. Packet size is not verified properly for SFTP packets. As a result when multiple SSH packets (conforming to max SSH packet size) are received by ssh, they might be combined into an SFTP packet which will exceed the max allowed packet size and potentially cause large amount of memory to be allocated. Note that situation described above can only happen for successfully authenticated users after completing the SSH handshake. This issue has been patched in OTP versions 27.2.4, 26.2.5.9, and 25.3.2.18. There are no known workarounds for this vulnerability.
CWE: CWE-789
References: https://github.com/erlang/otp/commit/0ed2573cbd55c92e9125c9dc70fa1ca7fed82872; https://github.com/erlang/otp/security/advisories/GHSA-78cv-45vx-q6fr; https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html
CVE: CVE-2025-27096
Published: 2025-02-20
Description: WeGIA is a Web Manager for Institutions with a focus on Portuguese language. A SQL Injection vulnerability was discovered in the WeGIA application, personalizacao_upload.php endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-j856-wh9m-9vpm
CVE: CVE-2025-0352
Published: 2025-02-20
Description: Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-05; https://www.rrms.com/contact-us/
CVE: CVE-2025-1265
Published: 2025-02-20
Description: An OS command injection vulnerability exists in Vinci Protocol Analyzer that could allow an attacker to escalate privileges and perform code execution on affected system.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-78
References: https://elseta.com/support/; https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-06
CVE: CVE-2025-24893
Published: 2025-02-20
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to `SolrSearch`. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to `<host>/xwiki/bin/get/Main/SolrSearch?media=rss&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28"Hello%20from"%20%2B%20"%20search%20text%3A"%20%2B%20%2823%20%2B%2019%29%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20`. If there is an output, and the title of the RSS feed contains `Hello from search text:42`, then the instance is vulnerable. This vulnerability has been patched in XWiki 15.10.11, 16.4.1 and 16.5.0RC1. Users are advised to upgrade. Users unable to upgrade may edit `Main.SolrSearchMacros` in `SolrSearchMacros.xml` on line 955 to match the `rawResponse` macro in `macros.vm#L2824` with a content type of `application/xml`, instead of simply outputting the content of the feed.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-95, CWE-94
References: https://github.com/xwiki/xwiki-platform/blob/568447cad5172d97d6bbcfda9f6183689c2cf086/xwiki-platform-core/xwiki-platform-search/xwiki-platform-search-solr/xwiki-platform-search-solr-ui/src/main/resources/Main/SolrSearchMacros.xml#L955; https://github.com/xwiki/xwiki-platform/blob/67021db9b8ed26c2236a653269302a86bf01ef40/xwiki-platform-core/xwiki-platform-web/xwiki-platform-web-templates/src/main/resources/templates/macros.vm#L2824; https://github.com/xwiki/xwiki-platform/commit/67021db9b8ed26c2236a653269302a86bf01ef40
CVE: CVE-2025-25299
Published: 2025-02-20
Description: CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting (XSS) vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within the document. It can lead to unauthorized JavaScript code execution, which might happen with a very specific editor and token endpoint configuration. This vulnerability affects only installations with Real-time collaborative editing enabled. The problem has been recognized and patched. The fix is available in version 44.2.1 (and above). Users are advised to upgrade. There are no known workarounds for this vulnerability.
CWE: CWE-79, CWE-80
References: https://ckeditor.com/docs/ckeditor5/latest/features/collaboration/real-time-collaboration/real-time-collaboration.html; https://github.com/ckeditor/ckeditor5/releases/tag/v44.2.1; https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-j3mm-wmfm-mwvh
CVE: CVE-2025-27097
Published: 2025-02-20
Description: GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. When a user transforms on the root level or single source with transforms, and the client sends the same query with different variables, the initial variables are used in all following requests until the cache evicts DocumentNode. If a token is sent via variables, the following requests will act like the same token is sent even if the following requests have different tokens. This can cause a short memory leak but it won't grow per each request but per different operation until the cache evicts DocumentNode by LRU mechanism.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-401
References: https://github.com/ardatan/graphql-mesh/security/advisories/GHSA-rr4x-crhf-8886
CVE: CVE-2025-27098
Published: 2025-02-20
Description: GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in the static file handler allows any client to access the files in the server's file system. When `staticFiles` is set in the `serve` settings in the configuration file, the following handler doesn't check if `absolutePath` is still under the directory provided as `staticFiles`. Users have two options to fix vulnerability; 1. Update `@graphql-mesh/cli` to a version higher than `0.82.21`, and if you use `@graphql-mesh/http`, update it to a version higher than `0.3.18` 2. Remove `staticFiles` option from the configuration, and use other solutions to serve static files.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: https://github.com/ardatan/graphql-mesh/security/advisories/GHSA-j2wh-wrv3-4x4g
CVE: CVE-2025-25958
Published: 2025-02-20
Description: Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/Abel-Lan/phpcms/issues/1; https://github.com/Abel-Lan/phpcms/issues/1
CVE: CVE-2025-25960
Published: 2025-02-20
Description: Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Abel-Lan/phpcms/issues/2; https://github.com/Abel-Lan/phpcms/issues/2
CVE: CVE-2024-54756
Published: 2025-02-20
Description: A remote code execution (RCE) vulnerability in the ZScript function of ZDoom Team GZDoom v4.13.1 allows attackers to execute arbitrary code via supplying a crafted PK3 file containing a malicious ZScript source file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/Chainmanner/GZDoom-Arbitrary-Code-Execution-via-ZScript-PoC; https://seclists.org/fulldisclosure/2025/Feb/11; http://seclists.org/fulldisclosure/2025/Feb/11
CVE: CVE-2024-7131
Published: 2025-02-20
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-22973
Published: 2025-02-20
Description: An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/[PII_REDACTED]06/CVE/blob/master/CVE-2025-22973.md
CVE: CVE-2025-25662
Published: 2025-02-20
Description: Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/O4V3/setMacFilterList.md
CVE: CVE-2025-25663
Published: 2025-02-20
Description: A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-120
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/WifiExtraSet.md
CVE: CVE-2025-25664
Published: 2025-02-20
Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-120
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/SetIpMacBind.md
CVE: CVE-2025-25667
Published: 2025-02-20
Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/saveParentControlInfo.md
CVE: CVE-2025-25668
Published: 2025-02-20
Description: Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/AC8V4/setMacFilterCfg.md
CVE: CVE-2025-25674
Published: 2025-02-20
Description: Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/AC10V1/fast_setting_wifi_set.md
CVE: CVE-2025-25675
Published: 2025-02-20
Description: Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-94
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/AC10V1/formexeCommand.md
CVE: CVE-2025-25676
Published: 2025-02-20
Description: Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/jangfan/my-vuln/blob/main/Tenda/i12V1/wifiSSIDget.md