deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-62052
Published: 2025-10-22
Description: Missing Authorization vulnerability in Horea Radu One Page Express Companion one-page-express-companion.This issue affects One Page Express Companion: from n/a through <= 1.6.43.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/one-page-express-companion/vulnerability/wordpress-one-page-express-companion-plugin-1-6-43-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-62054
Published: 2025-10-22
Description: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through <= 4.1.8.
CVSS Score: 7.5 (HIGH)
CWE: CWE-98
References: https://patchstack.com/database/Wordpress/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-1-8-local-file-inclusion-vulnerability?_s_id=cve
CVE: CVE-2025-62058
Published: 2025-10-22
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in favethemes Houzez Theme - Functionality houzez-theme-functionality.This issue affects Houzez Theme - Functionality: from n/a through < 4.2.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/houzez-theme-functionality/vulnerability/wordpress-houzez-theme-functionality-plugin-4-2-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-62060
Published: 2025-10-22
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themepoints Tab Ultimate tabs-pro.This issue affects Tab Ultimate: from n/a through <= 1.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/tabs-pro/vulnerability/wordpress-tab-ultimate-plugin-1-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-62061
Published: 2025-10-22
Description: Cross-Site Request Forgery (CSRF) vulnerability in impleCode Product Catalog Simple post-type-x.This issue affects Product Catalog Simple: from n/a through <= 1.8.4.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/Wordpress/Plugin/post-type-x/vulnerability/wordpress-product-catalog-simple-plugin-1-8-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve
CVE: CVE-2025-62062
Published: 2025-10-22
Description: Insertion of Sensitive Information Into Sent Data vulnerability in ThemeRuby Easy Post Submission easy-post-submission allows Retrieve Embedded Sensitive Data.This issue affects Easy Post Submission: from n/a through <= 1.7.0.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-201
References: https://patchstack.com/database/Wordpress/Plugin/easy-post-submission/vulnerability/wordpress-easy-post-submission-plugin-1-7-0-sensitive-data-exposure-vulnerability?_s_id=cve
CVE: CVE-2025-62063
Published: 2025-10-22
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through <= 3.9.2.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/wp-travel-blocks/vulnerability/wordpress-wp-travel-gutenberg-blocks-plugin-3-9-2-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-62068
Published: 2025-10-22
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/e2pdf/vulnerability/wordpress-e2pdf-plugin-1-28-09-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-62069
Published: 2025-10-22
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in RealMag777 MDTF wp-meta-data-filter-and-taxonomy-filter.This issue affects MDTF: from n/a through <= 1.3.3.8.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Plugin/wp-meta-data-filter-and-taxonomy-filter/vulnerability/wordpress-mdtf-plugin-1-3-3-8-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-62070
Published: 2025-10-22
Description: Missing Authorization vulnerability in WPXPO WowRevenue revenue.This issue affects WowRevenue: from n/a through <= 1.2.13.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/revenue/vulnerability/wordpress-wowrevenue-plugin-1-2-13-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-62071
Published: 2025-10-22
Description: Missing Authorization vulnerability in Repuso Social proof testimonials and reviews by Repuso social-testimonials-and-reviews-widget.This issue affects Social proof testimonials and reviews by Repuso: from n/a through <= 5.29.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/social-testimonials-and-reviews-widget/vulnerability/wordpress-social-proof-testimonials-and-reviews-by-repuso-plugin-5-29-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-62072
Published: 2025-10-22
Description: Missing Authorization vulnerability in Rustaurius Front End Users front-end-only-users.This issue affects Front End Users: from n/a through <= 3.2.33.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/front-end-only-users/vulnerability/wordpress-front-end-users-plugin-3-2-33-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-62073
Published: 2025-10-22
Description: Missing Authorization vulnerability in Sovlix MeetingHub meetinghub.This issue affects MeetingHub: from n/a through <= 1.23.9.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/Wordpress/Plugin/meetinghub/vulnerability/wordpress-meetinghub-plugin-1-23-9-broken-access-control-vulnerability?_s_id=cve
CVE: CVE-2025-62525
Published: 2025-10-22
Description: OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, local users could read and write arbitrary kernel memory using the ioctls of the ltq-ptm driver which is used to drive the datapath of the DSL line. This only effects the lantiq target supporting xrx200, danube and amazon SoCs from Lantiq/Intel/MaxLinear with the DSL in PTM mode. The DSL driver for the VRX518 is not affected. ATM mode is also not affected. Most VDSL lines use PTM mode and most ADSL lines use ATM mode. OpenWrt is normally running as a single user system, but some services are sandboxed. This vulnerability could allow attackers to escape a ujail sandbox or other contains. This is fixed in OpenWrt 24.10.4. There are no workarounds.
CVSS Score: 7.9 (HIGH)
CWE: CWE-20, CWE-125, CWE-787
References: https://github.com/openwrt/openwrt/commit/2a76abc5442e3f74d95b4caa9bb57e5488fc132e; https://github.com/openwrt/openwrt/commit/e001b31163a77683ee741d169f794cfa50926f37; https://github.com/openwrt/openwrt/security/advisories/GHSA-h427-frpr-7cqr
CVE: CVE-2025-62526
Published: 2025-10-22
Description: OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds.
CVSS Score: 7.9 (HIGH)
CWE: CWE-122
References: https://github.com/openwrt/openwrt/commit/4b907e69ea58fc0ba35fd1755dc4ba22262af3a4; https://github.com/openwrt/openwrt/commit/a[PII_REDACTED]a175cded3c93bdeb65f32ed3705e6; https://github.com/openwrt/openwrt/security/advisories/GHSA-cp32-65v4-cp73
CVE: CVE-2025-62604
Published: 2025-10-22
Description: MeterSphere is an open source continuous testing platform. Prior to version 2.10.25-lts, a logic flaw allows retrieval of arbitrary user information. This allows an unauthenticated attacker to log in to the system as any user. This issue has been patched in version 2.10.25-lts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/metersphere/metersphere/commit/b984fe74e84711ff326b0a348807c31fadf134af; https://github.com/metersphere/metersphere/releases/tag/v2.10.25-lts; https://github.com/metersphere/metersphere/security/advisories/GHSA-vj5x-7374-rf96
CVE: CVE-2025-62606
Published: 2025-10-22
Description: my little forum is a PHP and MySQL based internet forum that displays the messages in classical threaded view. Prior to version 2.5.12, an authenticated SQL injection vulnerability in the bookmark reordering feature allows any logged-in user to execute arbitrary SQL commands. This can lead to a full compromise of the application's database, including reading, modifying, or deleting all data. This issue has been patched in version 2.5.12.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/My-Little-Forum/mylittleforum/releases/tag/20251021.1; https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v; https://github.com/My-Little-Forum/mylittleforum/security/advisories/GHSA-m8hj-c6gr-6h6v
CVE: CVE-2025-23299
Published: 2025-10-22
Description: NVIDIA Bluefield and ConnectX contain a vulnerability in the management interface that could allow a malicious actor with high privilege access to execute arbitrary code.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787
References: https://nvd.nist.gov/vuln/detail/CVE-2025-23299; https://nvidia.custhelp.com/app/answers/detail/a_id/5684; https://www.cve.org/CVERecord?id=CVE-2025-23299
CVE: CVE-2025-40778
Published: 2025-10-22
Description: Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache.
This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
CVSS Score: 8.6 (HIGH)
CWE: CWE-349
References: https://kb.isc.org/docs/cve-2025-40778; http://www.openwall.com/lists/oss-security/2025/10/22/1; https://gist.github.com/N3mes1s/f76b4a606308937b0806a5256bc1f918
CVE: CVE-2025-40780
Published: 2025-10-22
Description: In specific circumstances, due to a weakness in the Pseudo Random Number Generator (PRNG) that is used, it is possible for an attacker to predict the source port and query ID that BIND will use.
This issue affects BIND 9 versions 9.16.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.16.8-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
CVSS Score: 8.6 (HIGH)
CWE: CWE-341
References: https://kb.isc.org/docs/cve-2025-40780; http://www.openwall.com/lists/oss-security/2025/10/22/1
CVE: CVE-2025-60333
Published: 2025-10-22
Description: TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the wepkey2 parameter in the setWiFiMultipleConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey2/wepkey2.md; https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/wepkey2/wepkey2.md
CVE: CVE-2025-60334
Published: 2025-10-22
Description: TOTOLINK N600R v4.3.0cu.7866_B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/sub_41E0C0/ssid.md; https://github.com/z472421519/BinaryAudit/tree/main/PoC/BOF/TOTOLINK/sub_41E0C0; https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/TOTOLINK/sub_41E0C0/ssid.md
CVE: CVE-2025-60335
Published: 2025-10-22
Description: A NULL pointer dereference in the main function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/TOTOLink/main/CONTENT_LENGTH_MAX.md; https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/TOTOLink/main/CONTENT_LENGTH_MAX.md
CVE: CVE-2025-60338
Published: 2025-10-22
Description: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the DhcpListClient function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/fromDhcpListClient/fromDhcpListClient.md
CVE: CVE-2025-62607
Published: 2025-10-22
Description: Nautobot Single Source of Truth (SSoT) is an app for Nautobot. Prior to version 3.10.0, an unauthenticated attacker could access this page to view the Service Now public instance name e.g. companyname.service-now.com. This is considered low-value information. This does not expose the Secret, the Secret Name, or the Secret Value for the Username/Password for Service-Now.com. An unauthenticated member would not be able to change the instance name, nor set a Secret. There is not a way to gain access to other pages Nautobot through the unauthenticated Configuration page. This issue has been patched in version 3.10.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: https://github.com/nautobot/nautobot-app-ssot/commit/1530d25cdeb929641ec47644f9a0a1d9d41e1cb8; https://github.com/nautobot/nautobot-app-ssot/releases/tag/v3.10.0; https://github.com/nautobot/nautobot-app-ssot/security/advisories/GHSA-535g-62r7-cx6v
CVE: CVE-2025-62659
Published: 2025-10-22
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in The Wikimedia Foundation MediaWiki CookieConsent extension allows Cross-Site Scripting (XSS).This issue affects MediaWiki CookieConsent extension: from v0.1.0 before v2.0.0.
CWE: CWE-79
References: https://phabricator.wikimedia.org/T404475
CVE: CVE-2025-8677
Published: 2025-10-22
Description: Querying for records within a specially crafted zone containing certain malformed DNSKEY records can lead to CPU exhaustion.
This issue affects BIND 9 versions 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 through 9.21.12, 9.18.11-S1 through 9.18.39-S1, and 9.20.9-S1 through 9.20.13-S1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-405
References: https://kb.isc.org/docs/cve-2025-8677; http://www.openwall.com/lists/oss-security/2025/10/22/1
CVE: CVE-2025-11957
Published: 2025-10-22
Description: Improper authorization in the temporary access workflow of Devolutions Server 2025.2.12.0 and earlier allows an authenticated basic user to self-approve or approve the temporary access requests of other users and gain unauthorized access to vaults and entries via crafted API requests.
CVSS Score: 8.4 (HIGH)
CWE: CWE-639
References: https://devolutions.net/security/advisories/DEVO-2025-0015/
CVE: CVE-2025-11958
Published: 2025-10-22
Description: An improper input validation in the Security Dashboard ignored-tasks API of Devolutions Server 2025.2.15.0 and earlier allows an authenticated user to cause a denial of service to the Security Dashboard via a crafted request.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-20
References: https://devolutions.net/security/advisories/DEVO-2025-0015/
CVE: CVE-2025-22168
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read the steps of another user's private checklist.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8637
CVE: CVE-2025-22169
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to subscribe to an item/object without having the expected permission level.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8638
CVE: CVE-2025-22170
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user without sufficient privileges to perform an action could if they included a particular state-related parameter of a user with sufficient privileges to perform the action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8639
CVE: CVE-2025-22171
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user is able to alter the private checklists of other users.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8640
CVE: CVE-2025-22172
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to read external reports without the required permission.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8641
CVE: CVE-2025-22173
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view certain sprint data without the required permission.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8642
CVE: CVE-2025-22174
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view portfolio rooms without the required permission.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8643
CVE: CVE-2025-22175
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to modify the steps of another user's private checklist.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8644
CVE: CVE-2025-22176
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view audit log items.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8645
CVE: CVE-2025-22177
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view other team overviews.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://jira.atlassian.com/browse/JIRAALIGN-8646
CVE: CVE-2025-22178
Published: 2025-10-22
Description: Jira Align is vulnerable to an authorization issue. A low-privilege user can access unexpected endpoints that disclose a small amount of sensitive information. For example, a low-level user was able to view items on the "Why" page.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: https://jira.atlassian.com/browse/JIRAALIGN-8647
CVE: CVE-2025-24934
Published: 2025-10-22
Description: Software which sets SO_REUSEPORT_LB on a socket and then connects it to a host will not directly observe any problems.  However, due to its membership in a load-balancing group, that socket will receive packets originating from any host.  This breaks the contract of the connect(2) and implied connect via sendto(2), and may leave the application vulnerable to spoofing attacks.




The kernel failed to check the connection state of sockets when adding them to load-balancing groups.  Furthermore, when looking up the destination socket for an incoming packet, the kernel will match a socket belonging to a load-balancing group even if it is connected, in violation of the contract that connected sockets are only supposed to receive packets originating from the connected host.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-488
References: https://security.freebsd.org/advisories/FreeBSD-SA-25:09.netinet.asc; https://www.usenix.org/system/files/conference/usenixsecurity26/sec26_prepub_ben-simhon.pdf
CVE: CVE-2025-60336
Published: 2025-10-22
Description: A NULL pointer dereference in the sub_41773C function of TOTOLINK N600R v4.3.0cu.7866_B20220506 allows attackers to cause a Denial of Service (DoS) via a crafted HTTP request.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/NPD/TOTOLink/sub_41773C/sub_41773C.md
CVE: CVE-2025-60337
Published: 2025-10-22
Description: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a buffer overflow in the speed_dir parameter in the SetSpeedWan function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-120
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/SetSpeedWan.md
CVE: CVE-2025-60339
Published: 2025-10-22
Description: Multiple buffer overflow vulnerabilities in the openSchedWifi function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the schedStartTime and schedEndTime parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-120
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/setSchedWifi/setSchedWifi.md
CVE: CVE-2025-60340
Published: 2025-10-22
Description: Multiple buffer overflows in the SetClientState function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the limitSpeed, deviceId, and limitSpeedUp parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/SetClientState/SetClientState.md
CVE: CVE-2025-60341
Published: 2025-10-22
Description: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the ssid parameter in the fast_setting_wifi_set function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/fast_setting_wifi_set/fast_setting_wifi_set.md
CVE: CVE-2025-60342
Published: 2025-10-22
Description: Tenda AC6 V2.0 15.03.06.50 was discovered to contain a stack overflow in the page parameter in the addressNat function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-121
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/addressNat/addressNat.md
CVE: CVE-2025-60343
Published: 2025-10-22
Description: Multiple buffer overflows in the AdvSetMacMtuWan function of Tenda AC6 v.15.03.06.50 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the wanMTU, wanSpeed, cloneType, mac, serviceName, serverName, wanMTU2, wanSpeed2, cloneType2, mac2, serviceName2, and serverName2 parameters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/z472421519/BinaryAudit/blob/main/PoC/BOF/Tenda/AdvSetMacMtuWan/AdvSetMacMtuWan.md