CVE-2026-76003 UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow

A weakness has been identified in UTT HiPER 1200GW up to 2.5.3-170306. Affected is the function strcpy of the file /goform/formGroupConfig. Executing a manipulation of the argument timestart can lead to stack-based buffer overflow. The attack may be performed from remote. The exploit has been mad...

CVE-2026-75784 TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow

A vulnerability was detected in TRENDnet TEW-WLC100 1v2.07b01. Affected by this issue is the function FUN0040da4c of the file /usr/nginx/sbin/nginx of the component HTTP Header Handler. The manipulation of the argument Server results in stack-based buffer overflow. The attack may be launched...

CVE-2026-74843

Wavlink WN531P3 and WN535M1 routers (firmware V250922) are vulnerable to a remote stack-based buffer overflow in the strcpy call of /etc/lighttpd/www/cgi-bin/export_pingortace.cgi, triggered by manipulating the HTTP_COOKIE argument. CVSS 10.0 (critical); a proof-of-concept exploit is publicly ava...

CVE-2026-19847 TOTOLINK A800R wps.so cstecgi.cgi setWiFiWpsConfig stack-based overflow

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setWiFiWpsConfig of the file /cgi-bin/cstecgi.cgi of the component wps.so. The manipulation of the argument pin results in stack-based buffer overflow. The attack can be launched remotely. The...

CVE-2026-19844 TOTOLINK A800R ipv6.so cstecgi.cgi setRadvdCfg stack-based overflow

A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setRadvdCfg of the file /cgi-bin/cstecgi.cgi of the component ipv6.so. Performing a manipulation of the argument radvdinterfacename results in stack-based buffer overflow. It is possible to...

CVE-2026-19814 TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflow

A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137B20200730. Affected is the function setMacQos of the file /cgi-bin/cstecgi.cgi of the component firewall.so. Performing a manipulation of the argument macAddress results in stack-based buffer overflow. It is possible to initiate the attac...

CVE-2026-19811 TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflow

A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137B20200730. The impacted element is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument Comment results in stack-based buffer overflow. The attack can be execute...

CVE-2026-73078

creationtimestamp| type| source ---|---|--- 2026-08-12 13:45:54+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-vim-1 2026-08-13 09:10:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxccuthbg2f...

CVE-2026-68816

Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally...

PT-2026-70645

Name of the Vulnerable Software and Affected Versions Microsoft Office Access affected versions not specified Description A stack-based buffer overflow occurs when a program writes more data to a buffer located on the stack than the buffer is allocated to hold, potentially overwriting adjacent...

CVE-2026-18898 UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflow

A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306. This affects the function strcpy of the file /goform/ConfigAdvideo. The manipulation of the argument timestart results in stack-based buffer overflow. The attack can be launched remotely. The exploit has been released to...

CVE-2017-20242

Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or potentially execute arbitrary code...

CVE-2017-20242

CVE-2017-20242 affects Keysight IxChariot Endpoint prior to 9.5.102. The vulnerability is a stack-based buffer overflow in the endpoint, exploitable by an unauthenticated remote attacker over the network via a specially crafted packet, potentially crashing the endpoint or allowing arbitrary code ...

CVE-2026-10709 FBX BinaryReadSectionHeader Stack-Based Buffer Overflow Vulnerability in Autodesk FBX SDK

A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::BinaryReadSectionHeader. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process...

CVE-2026-18589

The CVE-2026-18589 entry concerns Wavlink WL-NU516U1 (model 708c073-mt7628). The vulnerability is in nas.cgi, affecting the change_password function where manipulating User1Passwd triggers a stack-based buffer overflow. It is a NETWORK-accessible flaw with LOW attack complexity and NO user intera...

CVE-2026-43831

A stack-based buffer overflow vulnerability in the log message functionality could allow an unauthenticated attacker to achieve code execution...

CVE-2026-43833

A stack-based buffer overflow vulnerability in the upload functionality could allow an authenticated attacker to achieve code execution...

CVE-2026-43832

CVE-2026-43832 is a stack-based buffer overflow vulnerability located in the Cookie parsing methods . If the SafeEnhancement feature is enabled, an unauthenticated attacker could successfully exploit this flaw to achieve code execution . While many sources restrict specific details, the underlyin...

EUVD-2026-51387

Full details and mitigation steps are currently restricted and will be published at a later date...

CVE-2026-43831

CVE-2026-43831 describes a stack-based buffer overflow vulnerability located within the log message functionality . This flaw could enable an unauthenticated attacker to achieve code execution on the target system. While several documents indicate that full mitigation steps and specific software ...