CVE-2025-11524 Tenda AC7 SetDDNSCfg stack-based overflow

A flaw has been found in Tenda AC7 15.03.06.44. This issue affects some unknown processing of the file /goform/SetDDNSCfg. This manipulation of the argument ddnsEn causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2025-41332

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow exists due to manipulation of the wifi chkHz argument in the /goform/WifiMacFilterSet file. This issue can be triggered remotely. The exploit has been made public...

AlmaLinux 10 : icu (ALSA-2025:11888)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:11888 advisory. icu: Stack buffer overflow in the SRBRoot::addTag function CVE-2025-5222 Tenable has extracted the preceding description block directly from the AlmaLinux securi...

PT-2025-41327

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow exists in Tenda AC7 version 15.03.06.44. The issue is due to the manipulation of the upnpEn parameter within the /goform/SetUpnpCfg file. This allows for remote...

PT-2025-41326

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow exists in Tenda AC7 routers due to improper processing of the ddnsEn argument within the /goform/SetDDNSCfg file. This manipulation allows for remote code execution. The...

PT-2025-46845

Name of the Vulnerable Software and Affected Versions ToToLink LR1200GB versions 9.1.0u.6619 B20230130 ToToLink NR1800X versions 9.1.0u.6681 B20230703 Description A stack buffer overflow issue exists in the ToToLink routers. The web interface reads the lang parameter and constructs Help URL strin...

CVE-2025-61577

The D-Link DIR-816A2 router, specifically running firmware version FWv1.10CNB05 , is vulnerable to a stack-based buffer overflow . The root cause is the dir_setWanWifi function's failure to properly validate the length and size of input data provided via the statuscheckpppoeuser parameter. An att...

The vulnerability in the downloadFile.cgi script of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R router microprogramming systems allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the downloadFile.cgi script in the microprogramming software for TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity...

The vulnerability of the control traffic micro-atom of the BIG-IP Access Policy Manager allows a intruder to cause a service failure.

The vulnerability of the control traffic management micro-atom of the BIG-IP Access Policy Manager lies in buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-61577

D-Link DIR-816A2FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dirsetWanWifi function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

PT-2025-41333

Name of the Vulnerable Software and Affected Versions Tenda AC7 version 15.03.06.44 Description A stack-based buffer overflow can occur due to manipulation of the Password argument within the /goform/fast setting pppoe set file. This issue allows for remote exploitation. The exploit has been...

PT-2025-41393

Name of the Vulnerable Software and Affected Versions D-Link DIR-816A2 version FWv1.10CNB05 Description The D-Link DIR-816A2 firmware version FWv1.10CNB05 contains a stack overflow issue. This occurs through the statuscheckpppoeuser parameter within the dir setWanWifi function. A crafted input to...

SUSE CVE-2023-53655

In the Linux kernel, the following vulnerability has been resolved: rcu: Avoid stack overflow due to rcuirqenterchecktick being kprobe-ed Registering a kprobe on rcuirqenterchecktick can cause kernel stack overflow as shown below. This issue can be reproduced by enabling CONFIGNOHZFULL and bootin...

CVE-2025-36156

IBM InfoSphere Data Replication VSAM for z/OS Remote Source 11.4 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local user with access to the files storing CECSUB or CECRM on the container could overflow the buffer and execute arbitrary code on the system...

CVE-2025-54399

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2025-54400

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This...

CVE-2025-11387

A vulnerability was determined in Tenda AC15 15.03.05.18. This affects an unknown function of the file /goform/fastsettingpppoeset. This manipulation of the argument Password causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been publicly disclosed and may ...

CVE-2025-11388

A vulnerability was identified in Tenda AC15 15.03.05.18. This impacts an unknown function of the file /goform/setNotUpgrade. Such manipulation of the argument newVersion leads to stack-based buffer overflow. The attack may be launched remotely. The exploit is publicly available and might be used...

Security Bulletin: IBM Engineering Lifecycle Optimization - Publishing - Uncontrolled Recursion vulnerability in Apache Commons Lang

Summary Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass... Can Throw A StackOverflowError On Very Long Inputs. Following IBM® Engineering Lifecycle Management product is vulnerable to this attack, it has been addressed in this bulletin: IBM Engineering Lifecycle Optimization -...