PT-2021-5506

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 80040af8 function, located in the /formWlanSetup endpoint. This issue can be triggered via a crafted POST...

PT-2021-5505

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 800462c4 function, located in the /formAdvFirewall endpoint. This issue can be triggered via a crafted POST...

PT-2021-5502

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function sub 8003183C in the /fromLogin endpoint. This vulnerability can be triggered via a crafted...

Backdoor.Win32.Levelone.a Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/6a2d09c4527cf222e4e2571b074fcc0c.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Levelone.a Vulnerability: Remote Stack Buffer Overflow Description: The malware liste...

Backdoor.Win32.Ketch.b Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/9d7be3799594a82bf7056905f501af03.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Ketch.b Vulnerability: Remote Stack Buffer Overflow Description: Makes HTTP GET reque...

Backdoor.Win32.NinjaSpy.c Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/6eece319bc108576bd1f4a8364616264.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.NinjaSpy.c Vulnerability: Remote Stack Buffer Overflow Description: The specimen drop...

Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04397)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

Foxit Reader and PhantomPDF Competitive Conditions Vulnerability (CNVD-2021-04398)

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

Foxit Reader and PhantomPDF: Competition Condition Vulnerabilities

Foxit Reader and Foxit PhantomPDF are both Chinese Foxit Foxit company a PDF document reader. A security vulnerability exists in Foxit Reader and PhantomPDF. An attacker could exploit the vulnerability to cause a stack buffer overflow or out-of-bounds read...

OSV-2021-16 Stack-buffer-overflow in JS::Heap::gather_conservative_roots

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=29266 Crash type: Stack-buffer-overflow READ 8 Crash state: JS::Heap::gatherconservativeroots JS::Heap::gatherroots JS::Heap::collectgarbage...

Fortinet FortiWeb buffer error vulnerability

FortiWeb is a Web Application Firewall WAF that protects hosted web applications from attacks targeting known and unknown vulnerabilities. FortiWeb suffers from a stack buffer overflow vulnerability. An attacker can exploit the vulnerability by sending a specially crafted request with a large...

PT-2021-27904

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue is related to a stack-buffer-overflow read error. Technical details about the crash include the involvement of JS::Heap::gather conservative...

Fortinet FortiWeb buffer error vulnerability

Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...

openthread:ncp-uart-received-fuzzer: Stack-buffer-overflow in ot::NetworkData::ServiceTlv::GetServiceDataLength

Detailed Report: https://oss-fuzz.com/testcase?key=5708705517273088 Project: openthread Fuzzing Engine: afl Fuzz Target: ncp-uart-received-fuzzer Job Type: aflasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f78f0f8c723 Crash State:...

serenity:FuzzJs: Stack-buffer-overflow in JS::Heap::gather_conservative_roots

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=5341858496643072 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzJs Job Type: aflasanserenity Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x7ffc5ad65468 Cra...

Backdoor.Win32.Zombam.k Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: https://malvuln.com/advisory/79d9908b6769e64f922e74a090f5ceeb.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.k Vulnerability: Remote String Dereference Stack Buffer Overflow Description:...

qcms:fuzz: Stack-buffer-overflow in qcms::transform::qcms_transform_data_gray_template_lut::h2c3f2c2533cdd853

Detailed Report: https://oss-fuzz.com/testcase?key=4872574095982592 Project: qcms Fuzzing Engine: libFuzzer Fuzz Target: fuzz Job Type: libfuzzerasanqcms Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7f733f8f7714 Crash State:...

Trojan.Win32.Barjac Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/62ad686f97faaa68f580d32d25333f51.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Barjac Vulnerability: Remote Stack Buffer Overflow. Description: Trojan.Win32.Barjac mak...

PT-2021-4825

Name of the Vulnerable Software and Affected Versions ioLogik affected versions not specified Description The issue is related to a buffer overflow in the stack of the check cookie function in the ioLogik web server, which can be exploited by a remote attacker. This can lead to a denial of servic...

Backdoor.Win32.Zombam.j Remote Stack Buffer Overflow

Discovery / credits: malvuln - Malvuln.com c 2021 Original source: http://malvuln.com/advisory/a4212f23e1cc3bb34b0dfe15b2ad323e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Zombam.j Vulnerability: Remote Stack Buffer Overflow Description: Listens on TCP port...