theRaz0r

7 exploits Active since Nov 2024
CVE-2024-10661 WRITEUP HIGH WRITEUP
Tenda AC15 15.03.05.19 - Stack-based Buffer Overflow via SetDlnaCfg scanList Parameter
A vulnerability has been found in Tenda AC15 15.03.05.19 and classified as critical. This vulnerability affects the function SetDlnaCfg of the file /goform/SetDlnaCfg. The manipulation of the argument scanList leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS 8.8
CVE-2024-10662 WRITEUP HIGH WRITEUP
Tenda AC15 15.03.05.19 - Stack-based Buffer Overflow via devName Parameter in formSetDeviceName
A vulnerability was found in Tenda AC15 15.03.05.19 and classified as critical. This issue affects the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS 8.8
CVE-2024-10697 WRITEUP MEDIUM WRITEUP
Tenda AC6 15.03.05.19 - OS Command Injection via WriteFacMac API Endpoint
A vulnerability has been found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this vulnerability is the function formWriteFacMac of the file /goform/WriteFacMac of the component API Endpoint. The manipulation of the argument mac leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS 6.3
CVE-2024-10698 WRITEUP HIGH WRITEUP
Tenda AC6 15.03.05.19 - Stack-based Buffer Overflow via formSetDeviceName devName Parameter
A vulnerability was found in Tenda AC6 15.03.05.19 and classified as critical. Affected by this issue is the function formSetDeviceName of the file /goform/SetOnlineDevName. The manipulation of the argument devName leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS 8.8
CVE-2024-11046 WRITEUP MEDIUM WRITEUP
D-Link DI-8003 16.07.16A1 - OS Command Injection via upgrade_filter.asp Path Parameter
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been classified as critical. Affected is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS 6.3
CVE-2024-11047 WRITEUP HIGH WRITEUP
D-Link DI-8003 16.07.16A1 - Stack-Based Buffer Overflow in upgrade_filter.asp
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been declared as critical. Affected by this vulnerability is the function upgrade_filter_asp of the file /upgrade_filter.asp. The manipulation of the argument path leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS 8.8
CVE-2024-11048 WRITEUP HIGH WRITEUP
D-Link DI-8003 16.07.16A1 - Stack-Based Buffer Overflow via dbsrv_asp str Parameter
A vulnerability was found in D-Link DI-8003 16.07.16A1. It has been rated as critical. Affected by this issue is the function dbsrv_asp of the file /dbsrv.asp. The manipulation of the argument str leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS 8.8