PT-2025-41781

Name of the Vulnerable Software and Affected Versions ASUS AsIO3.sys driver affected versions not specified Description A stack buffer overflow exists in the AsIO3.sys driver. This issue is triggered by input manipulation and could result in a system crash, also known as a Blue Screen of Death...

Tenda AC18 Username Parameter Stack Buffer Overflow Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 has a stack buffer overflow vulnerability, which originates from the parameter Username in the file /goform/fastsettingpppoeset fails to...

Linux Distros Unpatched Vulnerability : CVE-2023-53655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rcu: Avoid stack overflow due to rcuirqenterchecktick being kprobe-ed Registering a kprobe o...

PT-2025-43869

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A flaw exists in the SetValue/GetValue function within the /goform/setDhcpConfig file of the Tenda O3 router. Manipulation of the dhcpEn argument can trigger a stack-based buffer overflow, potentially...

PT-2025-43921

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R version 17.0.0cu.557 B20221024 that allows for remote manipulation of the enable argument within the setSyslogCfg function located in the...

PT-2025-43917

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R that could lead to a stack-based buffer overflow. The issue is located in the setOpModeCfg function within the /cgi-bin/cstecgi.cg file, specifically...

PT-2025-43377

Name of the Vulnerable Software and Affected Versions Tenda AC6 V2.0 version 15.03.06.50 Description The Tenda AC6 V2.0 router version 15.03.06.50 contains a stack overflow in the page parameter within the DhcpListClient function. A crafted input can trigger this issue, leading to a Denial of...

PT-2025-43872

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A weakness exists in the Tenda O3 version 1.0.0.102478. This issue affects the SetValue/GetValue function within the /goform/setNetworkService file. Manipulation of the upnpEn argument can lead to a...

PT-2025-43873

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A security issue exists in Tenda O3 version 1.0.0.102478. The SetValue/GetValue function within the /goform/setVlanConfig file is susceptible to a stack-based buffer overflow. This occurs through...

PT-2025-43398

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.06.50 Description The Tenda AC6 version 15.03.06.50 contains a stack overflow issue in the ssid parameter within the fast setting wifi set function. This allows attackers to potentially cause a Denial of Service DoS by...

PT-2025-43874

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A stack-based buffer overflow exists in the SetValue/GetValue function within the /goform/sysAutoReboot file of Tenda O3. Manipulation of the enable argument can trigger this issue, allowing for remote...

PT-2025-43399

Name of the Vulnerable Software and Affected Versions Tenda AC6 V2.0 version 15.03.06.50 Description The Tenda AC6 V2.0 router contains a stack overflow in the addressNat function due to a flaw in the handling of the page parameter. A crafted input can trigger this issue, leading to a Denial of...

CVE-2025-11586

A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

EUVD-2025-33779

A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2025-11586

Summary: CVE-2025-11586 affects Tenda AC7 router firmware 15.03.06.44. A vulnerability exists in the endpoint /goform/setNotUpgrade where manipulation of the argument newVersion triggers a stack-based buffer overflow. This can be exploited remotely and, according to connected sources, the exploit...

CVE-2025-11586 Tenda AC7 setNotUpgrade stack-based overflow

A vulnerability was determined in Tenda AC7 15.03.06.44. This affects an unknown function of the file /goform/setNotUpgrade. This manipulation of the argument newVersion causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed...

CVE-2025-11549

A vulnerability has been found in Tenda W12 3.0.0.63948. The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out...

JLSEC-2025-24 curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow...

curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing...

CVE-2025-61856

CVE-2025-61856 affects Fuji Electric V-SFT (VS6ComFile component) up to version 6.2.7.0, with a stack-based buffer overflow in CV7BaseMap::WriteV7DataToRom. Opening specially crafted V-SFT files may lead to information disclosure, ABEND, and arbitrary code execution. Multiple sources (NVD, Red Ha...

EUVD-2025-33701

A stack-based buffer overflow vulnerability exists in VS6ComFile!CV7BaseMap::WriteV7DataToRom of V-SFT v6.2.7.0 and earlier. Opening specially crafted V-SFT files may lead to information disclosure, affected system's abnormal end ABEND, and arbitrary code execution...