CVE-2026-121600

A flaw has been found in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected by this vulnerability is the function setMacFilterRules of the file /cgi-bin/cstecgi.cgi of the component MAC Filter Handler. This manipulation of the argument addEffect causes stack-based buffer overflow. The attack can be...

CVE-2026-121599

A vulnerability was detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. Affected is the function setWiFiMultipleConfig/delWiFiMultipleConfig of the file /cgi-bin/cstecgi.cgi of the component Multi-SSID Configuration. The manipulation of the argument wepkey2/wepkey3 results in stack-based buffer...

CVE-2026-121598

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121600

A stack-based buffer overflow vulnerability exists in the MAC Filter Handler component of TOTOLINK A950RG (version 4.1.2cu.5268_B20221104). The flaw is located in the setMacFilterRules function of the /cgi-bin/cstecgi.cgi file, specifically triggered by the manipulation of the addEffect argument....

CVE-2026-121599

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a stack-based buffer overflow in the Multi-SSID Configuration component. The flaw exists within the setWiFiMultipleConfig/delWiFiMultipleConfig functions located in the /cgi-bin/cstecgi.cgi file. An attacker can trigg...

CVE-2026-121597

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

CVE-2026-121598

A stack-based buffer overflow vulnerability exists in the Basic Wireless Configuration Handler component of TOTOLINK A950RG version 4.1.2cu.5268_B20221104 . The flaw is located in the strcpy function of the /cgi-bin/cstecgi.cgi file, where improper handling of the wepkey argument allows for remot...

EUVD-2026-116667

A security vulnerability has been detected in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function strcpy of the file /cgi-bin/cstecgi.cgi of the component Basic Wireless Configuration Handler. The manipulation of the argument wepkey leads to stack-based buffer overflow. It is possibl...

CVE-2026-121597 TOTOLINK A950RG Easy Setup Wizard cstecgi.cgi setAppEasyWizardConfig stack-based overflow

A weakness has been identified in TOTOLINK A950RG 4.1.2cu.5268B20221104. This affects the function setAppEasyWizardConfig of the file /cgi-bin/cstecgi.cgi of the component Easy Setup Wizard Handler. Executing a manipulation of the argument functionType can lead to stack-based buffer overflow. The...

CVE-2026-121597

The TOTOLINK A950RG (firmware version 4.1.2cu.5268_B20221104 ) is vulnerable to a stack-based buffer overflow within the Easy Setup Wizard Handler component. The flaw exists in the setAppEasyWizardConfig function of the /cgi-bin/cstecgi.cgi file, where manipulating the functionType argument can t...

CVE-2026-121925: Snowflake: A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions,…

A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions, result in memory corruption during SAML-based authentication. During a native SSO/SAML login flow, the affected drivers may have copied a value taken from the identity provider's...

PT-2026-136988

0Day Ashlar-Vellum Cobalt XE File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability...

PT-2026-136943

A stack-based buffer overflow in libsnowflakeclient and the Snowflake PHP PDO Driver could, under specific conditions, result in memory corruption during SAML-based authentication. During a native SSO/SAML login flow, the affected drivers may have copied a value taken from the identity provider's...

PT-2026-137145

netrek-client-cow through 3.3.3 contains a stack-based buffer overflow vulnerability in handleSMessage in short.c that allows malicious servers to overflow a 100-byte stack buffer by sending oversized SP S MESSAGE packets. A malicious Netrek server or man-in-the-middle on the plaintext TCP...

Linux Distros Unpatched Vulnerability : CVE-2026-120434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains a stack-based buffer overflow in picttoppm's scanPoly function in...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : DMitry vulnerabilities (USN-8980-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8980-1 advisory. It was discovered that DMitry incorrectly handled long arguments, leading to a stack-based buffer overflo...

CVE-2026-120752

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JMsetannotcalloutline that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to Page.addfreetextannot can supply four or more...

CVE-2026-57191

A flaw was found in Asterisk. An unbounded string parsing vulnerability in the respjsippubsub module allows an unauthenticated remote attacker to trigger a stack-based buffer overflow by sending a specially crafted Message Waiting Indication MWI NOTIFY packet. Successful exploitation leads to a...

EUVD-2026-115640

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JMsetannotcalloutline that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to Page.addfreetextannot can supply four or more...

CVE-2026-120752

PyMuPDF 1.25.3 before 2.0 contains a stack-based buffer overflow vulnerability in JMsetannotcalloutline that copies a caller-supplied number of callout points into a fixed three-element stack array. Attackers who control the callout argument passed to Page.addfreetextannot can supply four or more...