CVE-2025-15178

HighCVSS 7.2/10Last modified Oct 7, 2026

Description

A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/VirtualSer of the component HTTP Request Handler. The manipulation of the argument page results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119 CWE-121

Affected software

No affected versions have been published.

Timeline

Published: Dec 29, 2025
Last modified: Oct 7, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-151797.2A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting. This manipulation of CVE-2025-151807.2A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/webExcptypemanFilte CVE-2025-151819.8A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unknown function of the CVE-2025-151829.8A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of the file /home/serve CVE-2025-151839.8A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown function of the file CVE-2025-151849.8A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the file /home/refugees CVE-2025-151859.8A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown functionality of the CVE-2025-151869.8A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unknown functionality of CVE-2025-151876.5A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of the component File Ha CVE-2025-151884.8A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of CVE-2025-151898.8A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /boafrm/formDefRoute.CVE-2025-151908.8A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /boafrm/formFilter. The