PT-2025-54645

Уязвимость микропрограммного обеспечения встраиваемых плат Qualcomm вызвана переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю раскрыть защищаемую информацию при обработке пакета с недопустимой длиной заголовка на основе стандарта EAVB BE...

libxml2 Heap Buffer Overflow RCE

The vulnerability of the xmlSnprintfElements function in the libxml2 library is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

PT-2025-18343

Name of the Vulnerable Software and Affected Versions GStreamer versions prior to 1.22.0-4+deb12u6 GStreamer versions prior to 1.18.4-3+deb11u5 Description A stack buffer overflow vulnerability exists in the H.265 codec parser within GStreamer. This vulnerability allows for remote code execution ...

CVE-2025-4068

A vulnerability classified as critical was found in code-projects Simple Movie Ticket Booking System 1.0. Affected by this vulnerability is the function changeprize. The manipulation of the argument prize leads to stack-based buffer overflow. The attack needs to be approached locally. The exploit...

Code-Projects Clothing Store Management System security vulnerabilities

Code-Projects Clothing Store Management System is Code-Projects open source a clothing store management system . A security vulnerability exists in Code-Projects Clothing Store Management System version 1.0, which stems from a mishandling of the additem function with the parameter st.productname,...

Code-Projects Prison Management System Security Vulnerabilities

Code-Projects Prison Management System is an open source prison management system from Code-Projects. A security vulnerability exists in Code-Projects Prison Management System version 1.0, which stems from an improper manipulation of the parameter filename in the addrecord function of the...

Code-Projects Train Ticket Reservation System security vulnerabilities

Code-Projects Train Ticket Reservation System is an open source train ticket reservation system from Code-Projects. A security vulnerability exists in Code-Projects Train Ticket Reservation System version 1.0, which stems from a stack buffer overflow due to an incorrect manipulation of the...

Exploit for CVE-2024-31449

CVE-2024-31449 Redis는 오픈 소스 인메모리 비관계형 데이터베이스이다. 요약 - Redis...

net-snmp:snmp_parse_args_fuzzer: Stack-buffer-overflow in snmp_log_options

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=6095325456826368 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparseargsfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

CVE-2025-3785

A vulnerability has been found in D-Link DWR-M961 1.1.36 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formStaticDHCP of the component Authorization Interface. The manipulation of the argument Hostname leads to stack-based buffer overflow. The attack can ...

CVE-2024-6198 SNORE Interface Unauthenticated Remote Code Execution

The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could u...

CVE-2024-6198: Buffer Copy without Checking Size of Input

The device exposes a web interface on ports TCP/3030 and TCP/9882. This web service runs lighttpd, which implements the “SNORE” interface. This interface is affected by a stack buffer overflow vulnerability due to insecure path parsing. An attacker with access to the LAN network interface could u...

PT-2025-41570

Уязвимость сценария downloadFile.cgi микропрограммного обеспечения маршрутизаторов TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU и TOTOLINK A3100R связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, оказать воздействие на...

OSV-2025-289 Stack-buffer-overflow in ot::Cli::Utils::OutputLine

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=411460530 Crash type: Stack-buffer-overflow READ Crash state: ot::Cli::Utils::OutputLine ot::Cli::Dns::HandleDnsRecordResponse ot::Dns::Client::FinalizeQuery...

PT-2025-19365 · Git +1 · Openthread

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software contains a stack-buffer-overflow read vulnerability. The crash state indicates the issue occurs within the Cli::Utils::OutputLine,...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition...

openthread:ot-cli-received-fuzzer: Stack-buffer-overflow in ot::Cli::Utils::OutputLine

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=4906207129436160 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ot-cli-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ...

D-Link DI-8100 Router Stack Buffer Overflow Vulnerability

The D-Link DI-8100 is a broadband router from D-Link designed for small to medium sized network environments. A stack buffer overflow vulnerability exists in the D-Link DI-8100. The vulnerability stems from the authasp function in the /auth.asp file in the jhttpd component not effectively limitin...

libexpat Buffer Overflow Code Execution

The vulnerability of the libexpat library for analyzing XML files involves buffer overflow in the stack. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system remotely...

PT-2025-55165

Уязвимость функции remove whitespace кластерного движка Corosync связана с переполнением буфера на стеке. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...