TOTOLINK AC1200 T8 exportOvpn function buffer overflow vulnerability

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK AC1200 T8 exportOvpn function, which can be exploited by an attacker to submit a special request that can crash the service program or execute...

TOTOLINK AC1200 T8 Buffer Overflow Vulnerability (CNVD-2025-08339)

The TOTOLINK AC1200 T8 is a dual-band full gigabit router from China's Gion Electronics TOTOLINK. The TOTOLINK AC1200 T8 suffers from a buffer overflow vulnerability that can be exploited by an attacker to submit a special request that can crash the service program or execute arbitrary code...

The vulnerability of the integrated service module of Dell iDRAC in remote access controllers iDRAC, related to the execution of operations outside the buffer in memory, allows a intruder to execute arbitrary code or cause a service failure.

The vulnerability of the Dell iDRAC Service Module integrated service module controllers in remote access controllers involves an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious individual to execute arbitrary code or cause service failures...

Tenda FH1206 安全漏洞

The Tenda FH1206 is a wireless router from Tenda China. A stack overflow vulnerability exists in the formSafeEmailFilter function in the Tenda FH1206 /goform/SafeEmailFilter that handles the page parameter, which can be exploited by a remote attacker to submit a special request that could crash t...

Heap Overflow Flaw

389-ds-base is vulnerable to a heap overflow flaw. The vulnerability is due to improper handling of input sizes when writing a value larger than 256 characters in the logentryattr, leading to memory corruption. Attackers can exploit this flaw to cause a denial of service, potentially crashing the...

PT-2024-5760 · Vonets · Vonets Wifi Bridge Repeaters +1

Name of the Vulnerable Software and Affected Versions: Vonets industrial wifi bridge relays and wifi bridge repeaters versions 3.3.23.6.9 and prior Description: The issue is related to an improper check or handling of exceptional conditions, which enables an unauthenticated remote attacker to cau...

Denial of Service (DoS)

Overview rexml is an An XML toolkit for Ruby. Affected versions of this package are vulnerable to Denial of Service DoS through the XML parsing process. An attacker can cause a denial of service by sending specially crafted XML documents that contain many specific characters such as . This...

PVS SOAP Service Crashes After Running the Auto Update

Provisioning Services Simple Object Access Protocol service crashes after running the Auto Update. The Auto Update feature in Provisioning Services PVS allows a master target to receive an update and roll it out to the target devices. The completion is signaled to the Windows Application log by a...

The vulnerability of the mod_proxy module in the Apache HTTP Server allows a hacker to cause a service failure.

The vulnerability of the modproxy module in the Apache HTTP Server is related to incorrect writing of a null pointer. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a service failure through a specially crafted request...

@fastly/js-compute has a use-after-free in some host call implementations

Impact The implementation of the following functions were determined to include a use-after-free bug: FetchEvent.client.tlsCipherOpensslName FetchEvent.client.tlsProtocol FetchEvent.client.tlsClientCertificate FetchEvent.client.tlsJA3MD5 FetchEvent.client.tlsClientHello...

ABB System 800xA Base Input Validation Error Vulnerability

ABB System 800xA Base is a distributed control system from ABB Switzerland for the industrial control industry. An input validation error vulnerability exists in ABB System 800xA Base versions 6.0.0 through 6.1.1-2. The vulnerability stems from the presence of an improper input validation...

The vulnerability of the sk_psock_verdict_data_ready() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the skpsockverdictdataready function in the net/core/skmsg.c module of the Linux kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Cyrus IMAP mail server, related to the execution of operations outside the buffer, allows a hacker to cause a service failure.

The vulnerability of the Cyrus IMAP mail server lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending multiple commands at once...

The vulnerability of the tcp_ao_connect_init() function in the Linux operating system’s IPv4 protocol implementation allows a hacker to cause a service failure.

The vulnerability of the tcpaoconnectinit function in the net/ipv4/tcpao.c module of the Linux kernel’s IPv4 protocol implementation is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sess_free_buffer() function in the fs/cifs/sess.c module of the SMB file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sessfreebuffer function in the fs/cifs/sess.c module of the SMB file system in Linux operating systems is related to the reallocation of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the p2sb_bar() function in the drivers/platform/x86/p2sb.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the p2sbbar function in the drivers/platform/x86/p2sb.c module of the Linux operating system is related to a crash due to repeated resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2024-3757

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow...

CVE-2024-3757

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through integer overflow...

CVE-2024-31078

in OpenHarmony v4.0.0 and prior versions allow a local attacker cause service crash through NULL pointer dereference...

CVE-2024-3757

OpenHarmony shows a local integer overflow vulnerability (CVE-2024-3757) affecting v4.0.0 and earlier. The issue allows a local attacker to crash the service due to an overflow in a component used by Arkcompiler runtime, with no public exploit details provided in the sources. Affected versions: O...