CVE-2026-10188

A flaw has been found in Tenda W12 3.0.0.74763. This affects the function cgistaKickOff of the file /bin/httpd. Executing a manipulation of the argument staMac can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been published and may be used...

CVE-2026-10190

A vulnerability was found in Tenda W12 3.0.0.74763. This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument webovertime results in denial of service. It is possible to launch the attack remotely. The...

CVE-2026-10189

A vulnerability has been found in Tenda W12 3.0.0.74763. This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2026-10189

A vulnerability has been found in Tenda W12 3.0.0.74763. This vulnerability affects the function cgiSysTimeInfoSet of the file /bin/httpd. The manipulation of the argument sec leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to t...

CVE-2026-10191

A vulnerability was determined in Tenda W12 3.0.0.74763. Impacted is the function cgiWifiMacFilterSet of the file /bin/httpd. This manipulation of the argument wifiMacFilterSet.macList.mac causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly...

EUVD-2026-33512

A vulnerability was found in Tenda W12 3.0.0.74763. This issue affects the function cgiSysWebTimeoutSet of the file /bin/httpd of the component Web Management Interface. The manipulation of the argument webovertime results in denial of service. It is possible to launch the attack remotely. The...

Security Bulletin: Missing or insecure "Content-Security-Policy" header affecting Watson Knowledge Catalog for IBM Cloud Pak for Data

Summary A missing or insecure "Content-Security-Policy" header was affecting some of the Watson Knowledge Catalog for IBM Cloud Pak for Data web UIs. The issue is now addressed. Vulnerability Details Third Party Entry: PSIRT-ADV0020520 DESCRIPTION: Created from Advisory: ADV0020520 CVSS Base scor...

Mini-stream RM-MP3 Converter Version 3.0.0.7 (.pls) Universal Stack BoF

Exploit for windows platform in category local exploits ======================================================================= Mini-stream RM-MP3 Converter Version 3.0.0.7 .pls Universal Stack BoF ======================================================================= !/usr/bin/perl Mini-stream...

Mini-Stream Multiple Products Stack Overflow Vulnerability

Mini-Stream products is prone to a stack overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-1324: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Mini-stream ASX to MP3 Converter 3.0.0.7 allows remote attackers to execute arbitrary code via a long URI in a playlist .m3u file...

ASX to MP3 Converter 3.0.0.7 - .m3u Universal Stack Overflow

ASX to MP3 Converter 3.0.0.7 - .m3u Universal Stack Overflow !/usr/bin/perl ASX to MP3 Converter Version 3.0.0.7 .m3u Universal Stack Overflow Exploit Disoverd By Cyber-Zone Exploited By Stack my $Header = "EXTM3U\n"; my $shellcode =...