CVE-2026-94089

D-Link DIR-868L version 2.01b05 is affected by a stack-based buffer overflow in the strcpy function of the file /webfa_authentication.cgi , within the Authentication Handler component. Remote attackers with no privileges can trigger the overflow by manipulating the id/password argument, leading t...

CVE-2019-9766

CVE-2019-9766 利用 Free MP3 CD Ripper2.6 版本存在的缓冲区溢出漏洞，构造特殊的 MP3 文件，攻击者在使用播放器进行播放时，音频文件蜜饵利用缓冲区溢出漏洞执行任意代码。 复现 攻击机：kali201903 192.168.198.142 受害机：windows10 21H1 192.168.198.137 在受害机上安装好 Free MP3 CD Ripper 2.6，在 kali 机上利用 MSF 生成反向连接 shellcode： root@kitploit: msfvenom -p windows/meterpreter/reversetcp...

CVE-2026-94003

A stack-based buffer overflow in the function get_css_path_from_uri within /cgi-bin/mbox-config of the Comfast CF-N1-S Web Management Interface (version 2.6.0.1) allows an unauthenticated remote attacker to trigger the overflow, leading to high impact on confidentiality, integrity, and availabili...

sonicwall-cve-2019-7482

sonicwall cve-2019-7482 stack-based overflow...

CVE-2024-20154

CVE-2024-20154：MediaTek MT6769 基带中的 NB-IoT SIB1-NB 栈溢出 分类： CWE-121 — 基于栈的缓冲区溢出 严重性： 严重（MediaTek 公告）· 8.8 高危，攻击向量：相邻（CISA-ADP） 类型： 远程代码执行 — 无需用户交互，无需事先关联 披露： MediaTek 安全公告，2025 年 1 月 6 日 https://corp.mediatek.com/product-security-bulletin/January-2025 分析目标： Samsung Galaxy A14 SM-A145R — MT6769...

CVE-2026-76689

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

CVE-2026-91090

GPAC (up to commit f1219cde) contains a stack-based buffer overflow in the function gf_node_activate_ex within scenegraph/base_scenegraph.c. The attack requires local access with low privileges and user interaction, yielding low integrity and availability impact (CVSS 3.1: 3.9 LOW ). A proof-of-c...

CVE-2026-91090 GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

CVE-2026-91090 GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

CVE-2026-91003 D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow

A flaw has been found in D-Link DI-8300 16.07. The affected element is the function rzglasp of the file /rzgl.asp of the component CGI Service. This manipulation of the argument redircturl causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

CVE-2026-91003

CVE-2026-91003 affects the D-Link DI-8300 (version 16.07) in its CGI Service component. The vulnerability resides in the function rzgl_asp within the file /rzgl.asp , where manipulation of the redirct_url argument leads to a stack-based buffer overflow . Remote exploitation is possible, and the C...

CVE-2026-91001 D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow

A security flaw has been discovered in D-Link DI-8400 16.07. This affects the function ddnsasp of the file /ddns.asp of the component DDNS Configuration. Performing a manipulation of the argument serv/user/host/wild/mx/bmx/cust/ip results in stack-based buffer overflow. The attack can be initiate...

CVE-2026-91001

A stack-based buffer overflow exists in the D-Link DI-8400 (firmware 16.07 ) in the function ddns_asp of the file /ddns.asp , part of the DDNS Configuration component. Manipulating the arguments serv , user , host , wild , mx , bmx , cust , or ip triggers the overflow. The attack can be initiated...

CVE-2026-90824 GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow

A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-90824 GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow

A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The manipulation leads to stack-based buffer overflow. The attack can only be performed from a local environment. The exploit has been...

CVE-2017-14980

CVE-2017-14980 Sync Breeze Enterprise 10.0.28 - Buffer Overflow Research Objective Study of a classic stack-based buffer overflow vulnerability in a controlled lab environment for educational purposes. The objective of this project was to better understand: Application fuzzing Crash analysis EIP...

CVE-2026-90689

A security flaw has been discovered in Tenda W20E 15.11.0.610681546841CNTDC. Impacted is the function formDelWebAuthWhiteUser. Performing a manipulation of the argument webAuthWhiteUserIndex results in stack-based buffer overflow. The attack can be initiated remotely...

CVE-2026-90693 D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow

A flaw has been found in D-Link DIR-878 120B05. This impacts the function SetWan3Settings of the component WAN Settings. This manipulation of the argument Primary/Secondary causes stack-based buffer overflow. Remote exploitation of the attack is possible...

CVE-2026-90689

A stack-based buffer overflow vulnerability exists in the Tenda W20E wireless router, specifically in the formDelWebAuthWhiteUser function within firmware version 15.11.0.61068_1546_841_CN_TDC . By manipulating the webAuthWhiteUserIndex argument, an authenticated remote attacker can trigger the o...

CVE-2026-90688

Tenda W20E (version 15.11.0.61068_1546_841_CN_TDC ) is affected by a stack-based buffer overflow in the function formIPMacBindAdd within the HTTP Handler component. Manipulating the IPMacBindRule argument triggers the overflow. The vulnerability is exploitable remotely with low privileges and no ...