CVE-2024-34212

The TOTOLINK CP450 wireless bridge, specifically version v4.1.0cu.747_B20191224 , is susceptible to a stack buffer overflow vulnerability within the CloudACMunualUpdate function. The root cause is the failure to properly validate the length of the FileName parameter input, allowing operations to ...

CVE-2024-34212

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function...

CVE-2024-34212

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a stack buffer overflow vulnerability in the CloudACMunualUpdate function...

flex:fuzz-main: Stack-buffer-overflow in filter_apply_chain

Detailed Report: https://oss-fuzz.com/testcase?key=6381429805088768 Project: flex Fuzzing Engine: libFuzzer Fuzz Target: fuzz-main Job Type: libfuzzerasanflex Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x7900f930067c Crash State: filterapplychain filterapplychain...

mpv:fuzzer_set_property_MPV_FORMAT_INT64_0: Stack-buffer-overflow in mpv_set_option

Project: https://github.com/mpv-player/mpv.git Detailed Report: https://oss-fuzz.com/testcase?key=4875501058457600 Project: mpv Fuzzing Engine: libFuzzer Fuzz Target: fuzzersetpropertyMPVFORMATINT640 Job Type: libfuzzerasani386mpv Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash...

openssl:hashtable: Stack-buffer-overflow in CRYPTO_atomic_load

Detailed Report: https://oss-fuzz.com/testcase?key=5058079189172224 Project: openssl Fuzzing Engine: libFuzzer Fuzz Target: hashtable Job Type: libfuzzerasani386openssl Platform Id: linux Crash Type: Stack-buffer-overflow WRITE 8 Crash Address: 0xf5d01117 Crash State: CRYPTOatomicload osslhtget...

CVE-2023-35749

D-Link DAP-2622 DDP Firmware Upgrade Filename Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35757

D-Link DAP-2622 DDP Set Date-Time NTP Server Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

Exploit for Classic Buffer Overflow in Linksys Ea7500_Firmware

CVE-2023-46012 LINKSYS AC1900 EA7500v3 IGD UPnP Stack Buff...

GLSA-202405-07 : HTMLDOC: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-07 HTMLDOC: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in HTMLDOC. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly...

CVE-2023-44419

D-Link DIR-X3260 Prog.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-X3260 routers. Authentication is not required to exploit this vulnerability. The specif...

CVE-2023-41213

D-Link DAP-1325 setDhcpAssignRangeUpdate lanipaddr Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1325 routers. Authentication is not required to exploit this...

CVE-2023-37319

D-Link DAP-2622 DDP Set IPv6 Address Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability...

CVE-2023-37323

D-Link DAP-2622 DDP Set SSID List PSK Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability...

CVE-2023-35735

D-Link DAP-2622 DDP Change ID Password New Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this...

CVE-2023-35729

D-Link DAP-2622 DDP Reset Auth Username Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerabilit...

CVE-2023-32144

D-Link DAP-1360 webproc COMMMakeCustomMsg Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-1360 routers. Authentication is not required to exploit this...

OSV-2024-402 Stack-buffer-overflow in SwiftProtobuf.TextFormatScanner.

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=68485 Crash type: Stack-buffer-overflow READ 1 Crash state: SwiftProtobuf.TextFormatScanner. SwiftProtobuf.TextFormatScanner. function signature specialization Arg...

D-Link DAP-2622 security vulnerability

D-Link DAP-2622 is a wireless access point AP from AUO D-Link that supports POE power supply and is mainly used for wireless network coverage in enterprise or commercial scenarios. The D-Link DAP-2622 suffers from a stack buffer overflow remote code execution vulnerability, which stems from a DDP...

D-Link DIR-3040 security vulnerabilities

The D-Link DIR-3040 is a router from China-based AUO D-Link. It provides the function of connecting to a network. A security vulnerability exists in the D-Link DIR-3040 that stems from a stack-based buffer overflow remote code execution vulnerability in prog.cgi SetIPv6PppoeSettings...