33913 matches found
Cisco Webex Meetings 输入验证错误漏洞
Cisco Webex Meetings is a video conferencing solution from Cisco USA. An input validation error vulnerability exists in Cisco Webex Meetings that stems from insufficient validation of URLs, which could result in redirects to untrusted websites...
PT-2025-35785
Name of the Vulnerable Software and Affected Versions: PLDT WiFi Router Prolink PGN6401V Firmware version 8.1.2 Description: An OS command injection flaw exists in the web management interface. The ping6.asp page submits user input to the /boaform/formPing6 API endpoint via the pingAddr parameter...
CVE-2025-57778
Digilent DASYLab DSB file parsing vulnerability (CVE-2025-57778): out-of-bounds write due to improper bounds checking enables arbitrary code execution when a user opens a malicious DSB file. Affected software is DASYLab; parsing of DSB files is the root cause. ZDI-25-891 confirms remote code exec...
CVE-2025-57778 Out Of Bounds Write to invalid source address when parsing a DSB file with Digilent DASYLab
There is an out of bounds write vulnerability due to improper bounds checking resulting in an invalid source address when parsing a DSB file with Digilent DASYLab. This vulnerability may result in arbitrary code execution. Successful exploitation requires an attacker to get a user to open a...
CVE-2025-57776
Digilent DASYLab is affected by an out-of-bounds write when parsing DSB files, caused by improper bounds checking. This can allow arbitrary code execution and requires a user to open a crafted DSB file. Affected versions are all DASYLab; exploitation is described by ZDI/NVD/RH entries. The docume...
Buffer_Overflow
Buffer Overflow May 2024 Linux Distribution: Ubuntu 8.10...
CVE-2025-8299
creationtimestamp| type| source ---|---|--- 2025-09-02 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-882/ 2025-09-02 23:31:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxvbldulbz2z...
PT-2025-35598
Name of the Vulnerable Software and Affected Versions DASYLab affected versions not specified Description DASYLab is susceptible to an out-of-bounds write due to insufficient bounds checking when parsing DSB files. This can lead to an invalid source address and potentially result in arbitrary cod...
Linux Distros Unpatched Vulnerability : CVE-2024-26956
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix failure to detect DAT corruption in btree and direct mappings Patch series nilfs2: fix kernel bug at submitbhwbc. This resolves a kernel BUG reporte...
Linux Distros Unpatched Vulnerability : CVE-2025-38636
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rv: Use strings in da monitors tracepoints Using DA monitors tracepoints with KASAN enabled triggers the following warning: BUG: KASAN: global-out-of-bounds in...
Linux Distros Unpatched Vulnerability : CVE-2025-38628
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix release of uninitialized resources on error path The commit in the fixes tag...
Linux Distros Unpatched Vulnerability : CVE-2025-38618
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vsock: Do not allow binding to VMADDRPORTANY It is possible for a vsock to autobind to VMADDRPORTANY. This can cause a use-after-free when a connection is made ...
Linux Distros Unpatched Vulnerability : CVE-2025-38666
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: appletalk: Fix use-after-free in AARP proxy probe The AARP proxyprobe routine aarpproxyprobenetwork sends a probe, releases the aarplock, sleeps, then...
CVE-2025-9790
A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit has been released to the public...
CVE-2025-9790
A security flaw has been discovered in SourceCodester Hotel Reservation System 1.0. This affects an unknown part of the file /admin/updateabout.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit has been released to the public...
CVE-2025-9781
A vulnerability has been found in TOTOLINK A702R 4.0.0-B20211108.1423. This affects the function sub4162DC of the file /boafrm/formFilter. Such manipulation of the argument ip6addr leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may ...
CVE-2025-9779
CVE-2025-9779 affects TOTOLINK A702R (version 4.0.0-B20211108.1423). The vulnerability is in the function sub_4162DC of /boafrm/formFilter, where manipulation of the ip6addr argument causes a buffer overflow. The issue can be exploited remotely, and public exploits exist. Several sources corrobor...
CVE-2025-9769
A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub478D28 of the file /mngplatform.asp. The manipulation of the argument addr with the input echo 12345 poc.txt results in command injection. An attack on the physical device is feasible. The exploit has...
CVE-2025-9769
A security flaw has been discovered in D-Link DI-7400G+ 19.12.25A1. Affected is the function sub478D28 of the file /mngplatform.asp. The manipulation of the argument addr with the input echo 12345 poc.txt results in command injection. An attack on the physical device is feasible. The exploit has...