CVE-2025-28026

CVE-2025-28026 affects TOTOLINK routers: A830R (v4.1.2cu.5182_B20201102), A950RG (v4.1.2cu.5161_B20200903), A3000RU (v5.9c.5185_B20201128), and A3100R (v4.1.2cu.5247_B20211129) with a buffer overflow in the downloadFile.cgi component. The issue is a technical vulnerability in the firmware allowin...

CVE-2025-28026

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-28027

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-28032

TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm paramet...

CVE-2025-28024

TOTOLINK A810R v4.1.2cu.5182_B20201026 is affected by a buffer overflow in the cstecgi.cgi component. The vulnerability stems from improper input length/size validation, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service. CVSSv3.1 base score 9.8 (CRITICA...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10859)

PCMan FTP Server is a server software for File Transfer Protocol FTP. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the failure of the DIR Command Handler module DIR Command Handler to properly handle a specific request. No detailed vulnerability details are provid...

CVE-2025-28030

The CVE-2025-28030 issue affects TOTOLINK A810R routers (version V4.1.2cu.5182_B20201026) with a stack overflow in the setParentalRules function triggered by the startTime and endTime parameters. Root cause: insufficient validation of input data length, enabling a remote attacker to potentially e...

CVE-2025-28033

TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the...

PT-2025-17539 · Nextu · Nextu Fleta Ax1500 Wifi6 Router

Name of the Vulnerable Software and Affected Versions: NEXTU FLETA AX1500 WIFI6 Router version 1.0.3 Description: A stack overflow vulnerability was discovered, allowing attackers to cause a Denial of Service DoS via a crafted POST request. The issue is related to the url parameter at the...

CVE-2025-28027

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10862)

PCMan FTP Server is a server software for File Transfer Protocol FTP. A buffer overflow vulnerability exists in PCMan FTP Server that stems from the MPUT Command Handler failing to properly process input data when processing a specific request. No detailed vulnerability details are available at...

CVE-2025-28029

This CVE affects TOTOLINK devices: A830R (v4.1.2cu.5182_B20201102), A950RG (v4.1.2cu.5161_B20200903), A3000RU (v5.9c.5185_B20201128), and A3100R (v4.1.2cu.5247_B20211129). A buffer overflow was found in the cstecgi.cgi component. From the accompanying data, the impact is listed as low for confide...

CVE-2024-46546

CVE-2024-46546 affects NEXTU FLETA AX1500 WIFI6 Router v1.0.3. A stack overflow in the url parameter of the "/boafrm/formFilter" API endpoint can be triggered by a crafted POST request, causing Denial of Service (DoS). The vulnerability is classified as NETWORK impact with low confidentiality, in...

CVE-2025-28027

CVE-2025-28027 affects TOTOLINK devices A830R (4.1.2cu.5182_B20201102), A950RG (4.1.2cu.5161_B20200903), A3000RU (5.9c.5185_B20201128), and A3100R (4.1.2cu.5247_B20211129) with a buffer overflow in downloadFile.cgi. CVSS 3.1 base score 7.3 (HIGH); attack vector: NETWORK, attack complexity: LOW, p...

PT-2025-22293 · Unknown · Fw-Wgs-804Hpt

Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the host ip parameter in the web snmp notifyv3 add post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider restricting access t...

Tenda i24和Tenda W12 安全漏洞

The Tenda W12 and i24 is a wireless router made by Tenda. A stack overflow vulnerability exists in the Tenda W12 and i24. The vulnerability stems from improper handling of the rebootDate parameter in the cgiSysScheduleRebootSet function in the /bin/httpd file. An attacker can exploit the...

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2025-09274)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe After Effects, which stems from a failure to properly handle read operations at memory boundaries and can be exploited by...

CVE-2025-29625

Summary of CVE-2025-29625 (Astrolog v7.70) : A buffer overflow in the FileOpen function is triggered by an overly long environment variable, allowing attackers to execute arbitrary code or cause a DoS. The vulnerability is described as LOCAL with LOW privileges required and NO user interaction. P...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition. Recent assessments:...

Dell Client Platform BIOS Buffer Overflow Vulnerability

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS is vulnerable to a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...