The vulnerability of the formSetMacFilterCfg() function (/goform/setMacFilterCfg) in the Tenda AC1206 router software allows a attacker to execute arbitrary code or cause service interruptions.

The vulnerability of the formSetMacFilterCfg function /goform/setMacFilterCfg of the Tenda AC1206 router’s microprogramming software is related to the issue where the operation’s output escapes the buffer and enters memory when processing the deviceList parameter. Exploiting this vulnerability...

The vulnerability of the fromGstDhcpSetSer() function (/goform/GstDhcpSetSer) in the software for Tenda FH1201 routers allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromGstDhcpSetSer function /goform/GstDhcpSetSer in the Tenda FH1201 router software is related to the operation that goes beyond the buffer in memory when processing the dips parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

CVE-2025-50756

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the newpass parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-7596

A vulnerability was found in Tenda FH1205 2.0.0.7775. It has been rated as critical. This issue affects the function formWifiExtraSet of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be initiated remotely. The...

CVE-2025-7598

A vulnerability classified as critical was found in Tenda AX1803 1.0.0.1. Affected by this vulnerability is the function formSetWifiMacFilterCfg of the file /goform/setWifiFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack can be launched...

glib: buffer overflow in set_connect_msg()

A flaw was found in the Glib library. A buffer overflow condition can be triggered in certain conditions due to an off-by-one error in SOCKS4CONNMSGLEN. This issue may lead to an application crash or other undefined behavior...

Tenda FH1205 安全漏洞

The Tenda FH1205 is a wireless router from Tenda China. The Tenda FH1205 version 2.0.0.7775 suffers from a buffer overflow vulnerability that originates from the parameter wpapskcrypto in the file /goform/WifiExtraSet, which fails to correctly validate the length of the input data, which can be...

WAVLINK WN535K3 安全漏洞

WAVLINK WN535K3 is a wireless router from China Ruiyin WAVLINK. A security vulnerability exists in WAVLINK WN535K3 version 20191010, which originates from a command injection in the newpass parameter of the setsysadm function, which could lead to the execution of arbitrary commands...

AZL-65400 CVE-2025-7546 affecting package gdb for versions less than 13.2-5

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfdelfsetgroupcontents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has bee...

UBUNTU-CVE-2025-7546

A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfdelfsetgroupcontents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has bee...

CVE-2025-7528

A vulnerability classified as critical has been found in Tenda FH1202 1.2.0.14408. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit ha...

TOTOLINK T6 注入漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An injection vulnerability exists in TOTOLINK T6 version 4.1.5cu.748B20211015, which originates from a command injection due to the incorrect operation of the function setDiagnosisCfg on the parameter ip in the fil...

ftrace: Add cond_resched() to ftrace_graph_set_hash()

...

vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint

...

net: openvswitch: fix nested key length validation in the set() action

...

GHSA-XWMG-2G98-W7V9 Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON

Connect2id Nimbus JOSE + JWT before 10.0.2 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2id product could have checked the...

CVE-2025-53864

Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the Gson 2.11.0 issue because the Connect2i...

CVE-2025-7422

A vulnerability classified as critical has been found in Tenda O3V2 1.0.0.123880. Affected is the function setAutoReboot of the file /goform/setNetworkService of the component httpd. The manipulation of the argument week leads to stack-based buffer overflow. It is possible to launch the attack...

SUSE CVE-2025-38263

In the Linux kernel, the following vulnerability has been resolved: bcache: fix NULL pointer in cachesetflush 1. LINE1794 - LINE1887 is some codes about function of bchcachesetalloc. 2. LINE2078 - LINE2142 is some codes about function of registercacheset. 3. registercacheset will call...

SUSE CVE-2025-38271

In the Linux kernel, the following vulnerability has been resolved: net: prevent a NULL deref in rtnlcreatelink At the time rtnlcreatelink is running, dev-netdevops is NULL, we must not use netdevlockops or risk a NULL deref if CONFIGNETSHAPER is defined. Use netifsetgroup instead of devsetgroup...