Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol with a theoretical transmission rate of 1900Mbps 600Mbps in 2.4GHz band and 1300Mbps in 5GHz band. Tenda AC15 suffers from a stack buffer overflow...

OpenZeppelin 安全漏洞

OpenZeppelin is a software application. A standard for secure blockchain applications. A security vulnerability exists in OpenZeppelin Contracts versions prior to 5.0.2 and prior to 4.9.6, which stems from the fact that the last iteration of the Base64.encode function can read portions of memory...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. FreeImage suffers from a buffer overflow vulnerability that originates from the program failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a...

FreeImage 安全漏洞

FreeImage is a cross-platform open source library for supporting popular graphic image formats. FreeImage suffers from a buffer overflow vulnerability that originates when the program fails to properly validate the length and size of input data, which can be exploited by a local attacker to execu...

Google Go Security Vulnerability

Google Go is a static strongly typed, compiled, concatenated, and garbage-collected programming language from Google, Inc. A security vulnerability exists in Google Go that stems from allowing users to enter a large number of characters, resulting in the allocation of a large amount of memory,...

openSUSE: Security Advisory for freerdp (SUSE-SU-2023:0399-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Android elevation of privilege vulnerability (CNVD-2026-11757)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability, which stems from the failure of the ashmem-dev.cpp file to properly validate the length of input data, which can be exploited by an attacker to gain...

Delta Electronics CNCSoft 安全漏洞

Delta Electronics CNCSoft-B is a CNC machine simulation system software from Delta Electronics Taiwan, China. A stack buffer overflow vulnerability exists in Delta Electronics CNCSoft-B, which can be exploited by an attacker to execute arbitrary code because the program fails to properly validate...

PT-2024-38409

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...

PT-2024-15077 · Zephyrproject Rtos +1 · Zephyr

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to an unchecked length coming from user input in the settings shell. This could potentially lead to exploitation. No specific details about affected devices or...

Tenda AC10 安全漏洞

Tenda AC10U is a wireless router from Tenda China. Tenda AC10U fromSetWirelessRepeat function has a buffer overflow vulnerability, the vulnerability stems from fromSetWirelessRepeat function's wpapskcrypto parameter fails to correctly validate the length of the input data size, an attacker can us...

PT-2024-20220 · Eserver · Ezserver

Name of the Vulnerable Software and Affected Versions: EzServer version 6.4.017 Description: The issue allows a denial of service daemon crash via a long string, such as one for the RNTO command. Recommendations: For EzServer version 6.4.017, consider restricting the length of input strings to...

SWFTools 安全漏洞

SWFTools is a set of utilities for working with Adobe Flash files SWF files. A buffer overflow vulnerability exists in SWFTools version 0.9.2, which stems from the countline method on the swf5compiler.flex:327 page that fails to correctly validate the length of input data, and can be exploited by...

TOTOLINK LR1200GB 安全漏洞

The TOTOLINK LR1200GB is a wireless dual-band 4G LTE router from China's TOTOLINK Electronics TOTOLINK that supports 2.4GHz and 5GHz dual-band networks. The TOTOLINK LR1200GB suffers from a buffer overflow vulnerability hole, which originates from the ip parameter of the setDiagnosisCfg function ...

Totolink X2000R 安全漏洞

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The Totolink X2000R suffers from a buffer overflow vulnerability that originates from the function formTmultiAP in file /bin/boa failing to properly validate the length size of the input data, which can be exploited by a...

Totolink T6 安全漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in Totolink T6 version 4.1.9cu.5241B20210923, which originates from the component HTTP POST Request Handler in the file /cgi-bin/cstecgi.cgi that fails to correctly validate t...

Tenda M3 fromSetLocalVlanInfo function stack buffer overflow vulnerability

Tenda M3 is a wireless controller AC from Tenda for centralized management of multiple wireless access points in scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. The Tenda M3 suffers from a stack buffer overflow vulnerability, which stems from the failure of...

Tenda AX12 /goform/SetStaticRouteCfg interface list parameter buffer overflow vulnerability

Tenda AX12 is a dual-band Gigabit Wi-Fi 6 wireless router designed for home users, supporting dual-band concurrent transmission at up to 2976Mbps. The Tenda AX12 suffers from a buffer overflow vulnerability that stems from the list parameter of /goform/SetStaticRouteCfg failing to properly valida...

Potential Issues with Address Casting and Validation in _calculateOceanId Function

Lines of code Vulnerability details Impact The use of abi.encodePacked without padding might introduce ambiguity in situations where input lengths are not fixed. Additionally, assuming tokenId can be any uint256 value without enforcing constraints could lead to unexpected behavior if constraints...

Tenda W30E 安全漏洞

The Tenda W30E is a router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda W30E version V16.01.0.124843, which originates from a failure of the localMsg function to properly validate the length of the input data, and can be exploited by a remote attacker to execute...