CVE-2025-40913

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...

CVE-2025-40913

CVE-2025-40913 concerns Net::Dropbear (through 0.16) for Perl, which embeds the libtommath library vulnerable to an integer overflow that is associated with CVE-2023-36328. Connected sources also reference a related CVE-2025-40914 affecting Perl CryptX and indicate the same underlying libtommath ...

CVE-2025-40913 Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow

Net::Dropbear versions through 0.16 for Perl contains a dependency that may be susceptible to an integer overflow. Net::Dropbear embeds a version of the libtommath library that is susceptible to an integer overflow associated with CVE-2023-36328...

QNAP QuTS hero Heap-Based Buffer Overflow Vulnerability (QSA-21-02, Baron Samedit)

QNAP QuTS hero is prone to a heap-based buffer overflow vulnerability in sudo dubbed SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-41238 PVSCSI heap-overflow vulnerability

VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI Paravirtualized SCSI controller that leads to an out of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine'...

CVE-2025-34108

A stack-based buffer overflow vulnerability exists in the login functionality of Disk Pulse Enterprise version 9.0.34. An attacker can send a specially crafted HTTP POST request to the /login endpoint with an overly long username parameter, causing a buffer overflow in the libspp.dll component...

CVE-2025-34106

A buffer overflow vulnerability exists in PDF Shaper versions 3.5 and 3.6 when converting a crafted PDF file to an image using the 'Convert PDF to Image' functionality. An attacker can exploit this vulnerability by tricking a user into opening a maliciously crafted PDF file, leading to arbitrary...

CVE-2025-34106

CVE-2025-34106 affects PDF Shaper v3.5 and v3.6. A buffer overflow occurs when using the “Convert PDF to Image” feature on a crafted PDF, allowing arbitrary code execution in the user context after the file is opened. Verified on Windows XP, 7, 8, and 10 via the PDFTools.exe component. Exploitati...

CVE-2025-34105 DiskBoss Enterprise Stack-Based Buffer Overflow RCE

A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specially crafted long URI, a remote...

Siemens Solid Edge SE2025 Stack Buffer Overflow Vulnerability

Siemens Solid Edge SE2025 is a development software from Siemens Germany. Siemens Solid Edge SE2025 suffers from a stack buffer overflow vulnerability that can be exploited by an attacker to execute code in the context of the current process...

CVE-2025-52080

In Netgear XR300 V1.0.3.3810.3.30, a stack-based buffer overflow vulnerability exists in the HTTPD service through the usbdevice.cgi endpoint. The vulnerability occurs when processing POST requests containing the sharename parameter...

PT-2025-29586

Name of the Vulnerable Software and Affected Versions VMware ESXi affected versions not specified VMware Workstation affected versions not specified VMware Fusion affected versions not specified Description VMware ESXi, Workstation, and Fusion contain a heap-overflow vulnerability in the PVSCSI...

RT-Thread buffer overflow vulnerability (CNVD-2025-16523)

RT-Thread is an open source IoT real-time operating system RTOS open-sourced by RT-Thread. RT-Thread suffers from a buffer overflow vulnerability that originates from the operation of the parameter timeout in the file rt-thread/components/lwp/lwpsyscall.c, which can be exploited by an attacker to...

CVE-2025-7570 UTT HiPER 840G aspRemoteApConfTempSend buffer overflow

A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. Affected by this issue is some unknown functionality of the file /goform/aspRemoteApConfTempSend. The manipulation of the argument remoteSrcTemp leads to buffer overflow. The attack may be launched...

Tenda FH1201 安全漏洞

The Tenda FH1201 is a wireless router from Tenda China. The Tenda FH1201 version 1.2.0.14408 suffers from a buffer overflow vulnerability, which originates from the parameter page in the file /goform/L7Prot that fails to correctly validate the length of the input data, which can be exploited by a...

Unspecified Vulnerability in Huawei HarmonyOS (CNVD-2025-15512)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS versions 5.0.1 and 5.1.0, which stems from a stack overflow risk when parsing vector images, and can be...

Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2025-20831)

The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that originates from the incorrect manipulation of the parameter L2TPUserName in the file /goform/formL2TPSetup, for which no detailed vulnerability details are provided at this tim...

Huawei EulerOS: Security Advisory for expat (EulerOS-SA-2025-1772)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Belkin F9K1122 Stack Buffer Overflow Vulnerability (CNVD-2025-20830)

The Belkin F9K1122 is a WiFi signal extender. The Belkin F9K1122 suffers from a stack buffer overflow vulnerability that originates from the incorrect operation of the parameter submit-url-ok in the file /goform/formBSSetSitesurvey, for which no detailed vulnerability details are provided...

Tenda AC6 SetSysTimeCfg function buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda. Tenda AC6 suffers from a buffer overflow vulnerability, which originates from the failure of the time parameter in the SetSysTimeCfg function to correctly validate the length and size of the input data, which can be exploited by an attacker to...