CVE-2025-25530

Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute...

CVE-2025-25530

CVE-2025-25530 affects Digital China DCBI-Netlog-LAB Gateway 1.0. The vulnerability is a buffer overflow caused by lack of length verification when saving parental control configuration information, potentially allowing a remote attacker to crash the device or execute arbitrary commands. Document...

CVE-2025-25530

Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DSL-3782 v1.01, which stems from the failure of /NewGUI/ParentalControl.asp to correctly validate the length and size of the input data, and can be exploited by a remote...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2024-56914

CVE-2024-56914 affects the D-Link DSL-3782 v1.01. A buffer overflow in the web interface file /New_GUI/ParentalControl.asp stems from improper validation of input data length/size, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service. Several connected sou...

Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation Bypass Vulnerabilities

A mitigation bypass / privilege escalation flaw has been discovered in Apple's iOS Screen Time functionality, granting one access to modify the restrictions. It allows a local attacker to acquire the Screen Time Passcode by bypassing the anti-bruteforce protections on the four-digit Passcode, and...

TOTOLINK A3600R setParentalRules function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the startTime/endTime parameter in the setParentalRules function of the /cgi-bin/cstecgi.cgi file that fails to...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

Linksys E2500 安全漏洞

The Linksys E2500 is an E-Series wireless router from Linksys, Inc. A security vulnerability exists in the Linksys E2500 version 2.0.00 that originates from allowing an authenticated attacker to execute arbitrary code via the hndparentalctrlunblock function...

Dangerous monitoring tool mSpy suffers data breach, exposes customer details

In a new episode of Spy vs Spy, the mobile monitoring app mSpy has suffered a data breach that exposed information about millions of its customers. As Malwarebytes Labs has reported before, the types of companies that make mobile applications that enable users to non-consensually spy and monitor ...

The State of Stalkerware in 2023–2024

The State of Stalkerware in 2023 PDF The annual Kaspersky State of Stalkerware report aims to contribute to awareness and a better understanding of how people around the world are impacted by digital stalking. Stalkerware is commercially available software that can be discreetly installed on...

CVE-2024-21773

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has pre-specified target devices and blocked URLs in parental control settings...

PT-2024-19047 · Tp Link · Tp-Link

Name of the Vulnerable Software and Affected Versions: TP-LINK products affected versions not specified Description: The issue allows a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has...

CVE-2023-36620

An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup="false" attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is...

CVE-2023-36620

An issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup="false" attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is...

CVE-2023-36621

An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...