58175 matches found
CVE-2025-12596
CVE-2025-12596 affects the Tenda AC23 router (firmware 16.03.07.52). The vulnerability is in the function /goform/saveParentControlInfo, where manipulating the Time parameter can trigger a buffer overflow. The issue allows remote execution and has publicly disclosed exploits. Impact is described ...
CVE-2025-12595
A weakness has been identified in Tenda AC23 16.03.07.52. This impacts the function formSetVirtualSer of the file /goform/SetVirtualServerCfg. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fixed the lockdep assertion that occurred during the sync reset unload event. The lockdep assertion was triggered during the sync reset unload event. When the sync reset flow is initiated using the devlink reload...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: eth: fbnic: avoid double-free when failing to DMA-map FW msg The semantics are that the caller of fbnicmbxmapmsg retains ownership of the message in case of an error. All existing callers properly free the allocated memory page...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa: A memory leak was fixed by freeing the notifier callback node after it was released from the hashtable entry. The commit e0573444edbf “Firmware: armffa: Add interfaces to request notification callbacks” adds...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: Firmware: armffa – Replaced the mutex with a rwlock to avoid sleep in atomic contexts. The current use of a mutex to protect access to the notifier hashtable can lead to issues in atomic contexts. This results in the following...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: bnxten: Memory corruption occurs when FW resources change during ifdown. The bnxtsetdfltrings function assumes that it is always called before any TC Traffic Channel is created. Therefore, it does not consider bp-numtc and assume...
CVE-2025-58152
FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication...
efi: Don't map the entire mokvar table to determine its size
...
CVE-2025-63458
Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the timeZone parameter in the formfastsettingwifiset function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63464
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub42396C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
EUVD-2025-37388
Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub421CF0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
EUVD-2025-37386
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub42396C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63465
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub422880 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63463
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub4232EC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
Astra Linux - уязвимость в linux-5.10
In the Linux kernel, the following vulnerability has been resolved: efi/unaccepted: touch soft lockup during memory accept Commit 50e782a86c98 "efi/unaccepted: Fix soft lockups caused by parallel memory acceptance" has released the spinlock so other CPUs can do memory acceptance in parallel and n...
CVE-2025-63468
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the httphost parameter in the sub426EF8 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63468
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the httphost parameter in the sub426EF8 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-63467
Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub425400 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...