CVE-2024-39288

A buffer overflow vulnerability exists in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...

EUVD-2025-39288

Malicious code in utomo-gudeg24-riris npm...

MAL-2025-39288 Malicious code in willow-zebra-pcm246-project (npm)

The package willow-zebra-pcm246-project was found to contain malicious code...

CVE-2022-39288

fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of service via malicious use of the Content-Type header. An attacker can send an invalid Content-Type header that can cause the application to crash. This issue has been addressed i...

CVE-2024-39288

A buffer overflow vulnerability exists in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2024-39288

A buffer overflow vulnerability exists in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...

CVE-2024-39288

A buffer overflow vulnerability exists in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger this vulnerability...

Wavlink AC3000 internet.cgi set_add_routing() buffer overflow vulnerability

Talos Vulnerability Report TALOS-2024-2021 Wavlink AC3000 internet.cgi setaddrouting buffer overflow vulnerability January 14, 2025 CVE Number CVE-2024-39288 SUMMARY A buffer overflow vulnerability exists in the internet.cgi setaddrouting functionality of Wavlink AC3000 M33A8.V5030.210505. A...

CVE-2023-39288

creationtimestamp| type| source ---|---|--- 2023-08-26 02:27:36+00:00| seen| https://t.me/cibsecurity/69233...

CVE-2023-39288

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploi...

CVE-2023-39288

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploi...

CVE-2023-39288

The CVE-2023-39288 entry concerns Mitel MiVoice Connect’s Connect Mobility Router component. A command argument injection is possible due to insufficient parameter sanitization, requiring an authenticated attacker with elevated privileges and internal network access. The exploit could enable acce...

@aicore/cocodb (>=1.0.1, <=1.0.6), @chainlink/external-adapter-framework (>=0.0.65, <=0.12.0) +77 more potentially affected by CVE-2022-39288 via fastify (>=4.0.2, <=4.7.0)

fastify NPM version =4.0.2, =1.0.1, =0.0.65, =1.1.1, =5.0.1, =1.0.0, =2.0.0, =9.0.0-next.2, =3.7.4, =2.2.1-canary.98, =3.0.0, =3.0.0, =0.0.1, =0.0.5, =6.0.0-6-next.35, =6.0.0-6-next.49 and more Source cves: CVE-2022-39288 Source advisory: OSV:GHSA-455W-C45V-86RG...

@aicore/cocodb (>=1.0.1, <=1.0.6), @chainlink/external-adapter-framework (>=0.0.65, <=0.12.0) +77 more potentially affected by CVE-2022-39288 via fastify (>=4.0.2, <=4.7.0)

fastify NPM version =4.0.2, =1.0.1, =0.0.65, =1.1.1, =5.0.1, =1.0.0, =2.0.0, =9.0.0-next.2, =3.7.4, =2.2.1-canary.98, =3.0.0, =3.0.0, =0.0.1, =0.0.5, =6.0.0-6-next.35, =6.0.0-6-next.49 and more Source cves: CVE-2022-39288 Source advisory: GHSA-455W-C45V-86RG...

@aicore/cocodb (>=1.0.1, <=1.0.6), @chainlink/external-adapter-framework (>=0.0.65, <=0.12.0) +77 more potentially affected by CVE-2022-39288 via fastify (>=4.0.2, <=4.7.0)

fastify NPM version =4.0.2, =1.0.1, =0.0.65, =1.1.1, =5.0.1, =1.0.0, =2.0.0, =9.0.0-next.2, =3.7.4, =2.2.1-canary.98, =3.0.0, =3.0.0, =0.0.1, =0.0.5, =6.0.0-6-next.35, =6.0.0-6-next.49 and more Source cves: CVE-2022-39288 Source advisory: MEND:CVE-2022-39288...

CVE-2022-39288 Denial of service in Fastify via Content-Type header

fastify is a fast and low overhead web framework, for Node.js. Affected versions of fastify are subject to a denial of service via malicious use of the Content-Type header. An attacker can send an invalid Content-Type header that can cause the application to crash. This issue has been addressed i...

CVE-2022-39288

CVE-2022-39288 affects the Fastify web framework for Node.js. The vulnerability arises in older Fastify versions (prior to 4.8.1) where a malicious Content-Type header can trigger a denial of service (application crash). The issue is addressed in commit fbb07e8d and the fix is planned for release...

openSUSE Security Update : go1.14 (openSUSE-2020-1405)

This update for go1.14 fixes the following issues : - go1.14 was updated to version 1.14.7 - CVE-2020-16845: dUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs bsc1174977. - go1.14.6 released 2020-07-16 includes fixes to the go command, the compiler, the linker, vet...