CVE-2025-12241: Stack-based Buffer Overflow

A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557B20221024. This impacts the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. The manipulation of the argument lang results in stack-based buffer overflow. It is possible to launch the atta...

CVE-2025-60566: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetMACFilter...

CVE-2025-60564: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetLog...

CVE-2025-60569: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetRoute...

CVE-2025-60557: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetEasyWizard...

CVE-2025-60550: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formEasySetTimezone...

CVE-2025-60562: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formWlSiteSurvey...

CVE-2025-60551: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the nextpage parameter in the function formDeviceReboot...

CVE-2025-60549: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAutoDetecWANwizard4...

CVE-2025-60572: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork...

CVE-2025-60570: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery...

CVE-2025-60568: Stack-based Buffer Overflow

D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvFirewall...

CVE-2025-60334: Stack-based Buffer Overflow

TOTOLINK N600R v4.3.0cu.7866B20220506 was discovered to contain a stack overflow in the ssid parameter in the setWiFiBasicConfig function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2020-36855

A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of the argument StorageQuota leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been...

CVE-2020-36855: Stack-based Buffer Overflow

A security vulnerability has been detected in DCMTK up to 3.6.5. The affected element is the function parseQuota of the component dcmqrscp. The manipulation of the argument StorageQuota leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been...

PT-2025-42892

Name of the Vulnerable Software and Affected Versions DCMTK versions up to 3.6.5 Description A security issue exists in DCMTK related to the parseQuota function within the dcmqrscp component. Manipulation of the StorageQuota argument can lead to a stack-based buffer overflow. Local access is...

EUVD-2025-35057

Stack-based Buffer Overflow in lwsadnsparselabel in warmcat libwebsockets allows, when the LWSWITHSYSASYNCDNS flag is enabled during compilation, to overflow the labelstack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer...

CVE-2025-11678: Stack-based Buffer Overflow

Stack-based Buffer Overflow in lwsadnsparselabel in warmcat libwebsockets allows, when the LWSWITHSYSASYNCDNS flag is enabled during compilation, to overflow the labelstack, when the attacker is able to sniff a DNS request in order to craft a response with a matching id containing a label longer...

PT-2025-45944

A vulnerability, which was classified as critical, was found in FFmpeg up to 7.1. This affects the function ff aac search for tns of the file libavcodec/aacenc tns.c of the component AAC Encoder. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely...

PT-2025-42709

Name of the Vulnerable Software and Affected Versions Nixdorf Wincor PORT IO Driver versions up to 1.0.0.1 Description A flaw exists in the IOCTL Handler component of Nixdorf Wincor PORT IO Driver, specifically within the sub 11100 function in the wnport.sys library. This issue leads to a...