CVE-2020-7997

ASUS WRT-AC66U 3 RT 3.0.0.4.37267 devices allow XSS via the Client Name field to the Parental Control feature...

CVE-2025-29101

The CVE-2025-29101 entry concerns Tenda AC8V4.0 with firmware version V16.03.34.06, where a stack overflow is triggered by the deviceid parameter in the get_parentControl_list_Info function. The vulnerability is documented as a stack overflow that can impact availability, and CNVD references pote...

Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO

In response to growing worries about the safety of children using Roblox, the CEO of the company has said to parents: "My first message would be, if you're not comfortable, don't let your kids be on Roblox." Roblox is one of the most popular gaming platforms, especially among young children...

CVE-2025-25530

Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute...

PT-2025-6388 · Digital China · Dcbi-Netlog-Lab Gateway

Name of the Vulnerable Software and Affected Versions: Digital China DCBI-Netlog-LAB Gateway version 1.0 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification when saving parental control configuration information. This can cause the remote...

CVE-2025-25530

Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute...

CVE-2025-25530

CVE-2025-25530 affects Digital China DCBI-Netlog-LAB Gateway 1.0. The vulnerability is a buffer overflow caused by lack of length verification when saving parental control configuration information, potentially allowing a remote attacker to crash the device or execute arbitrary commands. Document...

CVE-2025-25530

Buffer overflow vulnerability in Digital China DCBI-Netlog-LAB Gateway 1.0 due to the lack of length verification, which is related to saving parental control configuration information. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

D-Link DSL-3782 安全漏洞

The D-Link DSL-3782 is a wireless router from China-based AUO D-Link. A buffer overflow vulnerability exists in the D-Link DSL-3782 v1.01, which stems from the failure of /NewGUI/ParentalControl.asp to correctly validate the length and size of the input data, and can be exploited by a remote...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2024-56914

D-Link DSL-3782 v1.01 is vulnerable to Buffer Overflow in /NewGUI/ParentalControl.asp...

CVE-2024-56914

CVE-2024-56914 affects the D-Link DSL-3782 v1.01. A buffer overflow in the web interface file /New_GUI/ParentalControl.asp stems from improper validation of input data length/size, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service. Several connected sou...

Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation Bypass Vulnerabilities

A mitigation bypass / privilege escalation flaw has been discovered in Apple's iOS Screen Time functionality, granting one access to modify the restrictions. It allows a local attacker to acquire the Screen Time Passcode by bypassing the anti-bruteforce protections on the four-digit Passcode, and...

TOTOLINK A3600R setParentalRules function buffer overflow vulnerability

TOTOLINK A3600R is a 6-antenna 1200M wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A3600R suffers from a buffer overflow vulnerability that originates from the startTime/endTime parameter in the setParentalRules function of the /cgi-bin/cstecgi.cgi file that fails to...

CVE-2024-40495

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hndparentalctrlunblock function...

Linksys E2500 安全漏洞

The Linksys E2500 is an E-Series wireless router from Linksys, Inc. A security vulnerability exists in the Linksys E2500 version 2.0.00 that originates from allowing an authenticated attacker to execute arbitrary code via the hndparentalctrlunblock function...

Dangerous monitoring tool mSpy suffers data breach, exposes customer details

In a new episode of Spy vs Spy, the mobile monitoring app mSpy has suffered a data breach that exposed information about millions of its customers. As Malwarebytes Labs has reported before, the types of companies that make mobile applications that enable users to non-consensually spy and monitor ...

The State of Stalkerware in 2023–2024

The State of Stalkerware in 2023 PDF The annual Kaspersky State of Stalkerware report aims to contribute to awareness and a better understanding of how people around the world are impacted by digital stalking. Stalkerware is commercially available software that can be discreetly installed on...