CVE-2019-9766

CVE-2019-9766 Free MP3 CD Ripper 2.6 に存在するバッファオーバーフロー脆弱性を利用し、特別に細工した MP3 ファイルを構築します。攻撃者がプレーヤーで再生すると、おとりのオーディオファイルがバッファオーバーフロー脆弱性を利用して任意のコードを実行します。 再現 攻撃機：kali201903 192.168.198.142 被害機：windows10 21H1 192.168.198.137 被害機に Free MP3 CD Ripper 2.6 をインストールしておきます。kali 機で MSF を使用してリバース接続用のシェルコードを生成します：...

CVE-2026-105778

The Tenda AC5 router, running firmware version 02.03.01.111_multi , is vulnerable to a stack-based buffer overflow in the Wifi Handler component. Specifically, a flaw in the /goform/setWifi file allows an attacker to trigger the overflow by manipulating the wifiPwd argument. This vulnerability ca...

CVE-2026-105778 Tenda AC5 Wifi setWifi stack-based overflow

A vulnerability has been found in Tenda AC5 02.03.01.111multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - バッファオーバーフロー調査 目的 教育目的で管理されたラボ環境における、古典的なスタックベースのバッファオーバーフロー脆弱性の研究。 このプロジェクトの目的は、以下をより深く理解することでした： アプリケーションのファジング クラッシュ解析 EIP制御 バッドキャラクタの特定 メモリ破損 シェルコードの実行フロー 基本的なエクスプロイト開発手法 環境 Windows 10 仮想マシン Sync Breeze Enterprise 10.0.28 Immunity Debugger Mona.p...

CVE-2026-105285 Totolink A3002MU QoS Rule formIpQoS stack-based overflow

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

CVE-2026-105285

A stack-based buffer overflow vulnerability exists in the Totolink A3002MU (version 1.0.0-B20230403.1455) within the QoS Rule Handler component. Specifically, an unknown function in the /boafrm/formIpQoS file is affected. Manipulation of the addQos/comment/entry_name argument can trigger the over...

sonicwall-cve-2019-7482

sonicwall cve-2019-7482 スタックベースのオーバーフロー...

CVE-2026-104611 Tenda AC9 POST Request fast_setting_internet_set stack-based overflow

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2024-20154

CVE-2024-20154: MediaTek MT6769ベースバンドにおけるNB-IoT SIB1-NBスタックオーバーフロー 分類: CWE-121 — スタックベースのバッファオーバーフロー 深刻度: Critical MediaTek セキュリティ速報 · 8.8 High、攻撃ベクター: 隣接 CISA-ADP 種類: リモートコード実行 — ユーザー操作不要、事前関連付け不要 開示: MediaTek セキュリティ速報、2025年1月6日 https://corp.mediatek.com/product-security-bulletin/January-2025...

CVE-2026-101354 FAST FAC1203R MmtAtePrase _tWlanTask stack-based overflow

A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...

CVE-2026-101081 D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081 D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101074

A stack-based buffer overflow exists in the Authentication component of Netcore NR289-GE version 1.4.5102 . The vulnerability is located within the password-check function of the /bin/boa file. An attacker can trigger the overflow by manipulating the Username argument, potentially leading to remo...

CVE-2026-101039 FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101039 FAST FAC1900R devdiscover Service copy_msg_element stack-based overflow

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

CVE-2026-101038

The FAST FAC1200R 5.0_20201119_1.0.2 software contains a stack-based buffer overflow vulnerability within the MmtAtePrase function of the MmtAtePrase Parser component. This flaw allows for remote exploitation , and the exploit has been publicly disclosed. While the vulnerability is confirmed, the...

CVE-2026-101037

A stack-based buffer overflow vulnerability exists in the devdiscover Service of FAST FAC1200R 5.0_20201119_1.0.2 . The flaw is located in the parse_advertisement_frame function and can be triggered remotely. Public exploits for this vulnerability are available. The vendor has not provided a resp...

CVE-2026-101037 FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow

A vulnerability was found in FAST FAC1200R 5.0202011191.0.2. Affected is the function parseadvertisementframe of the component devdiscover Service. The manipulation results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and could be used. The...

CVE-2026-101003 Cesanta Mongoose MQTT Broker main.c fn stack-based overflow

A weakness has been identified in Cesanta Mongoose up to 7.21. Affected by this vulnerability is the function fn of the file tutorials/mqtt/mqtt-server/main.c of the component MQTT Broker. Executing a manipulation can lead to stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-101003

Cesanta Mongoose versions up to 7.21 are vulnerable to a stack-based buffer overflow within the MQTT Broker component. The flaw exists in the fn function located in tutorials/mqtt/mqtt-server/main.c. A remote attacker can trigger this vulnerability through a manipulation, potentially leading to a...