39228 matches found
CVE-2026-36770
The Tenda US_W3V1.0BR wireless router firmware (v1.0.0.3) is affected by a stack overflow vulnerability within the ask_to_reboot function. Specifically, the flaw exists in the Go parameter , which can be triggered by a crafted input. This vulnerability allows an attacker to cause a Denial of Serv...
CVE-2026-36794: Stack-based Buffer Overflow
Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain multiple stack overflows in the R7WebsSecurityHandler function via the username and password parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP...
CVE-2025-52292
A stack buffer overflow exists in the filein_process function (located in in_file.c ) of GPAC MP4Box v2.4 . This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a specially crafted MP4 file . While the vulnerability is documented across multiple sources, the...
PT-2026-48186
Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain multiple stack overflows in the formwrlSSIDset function via the mit ssid and mis ssid index parameters. These vulnerabilities allow attackers to cause a Denial of Service DoS via a crafted HTTP...
CVE-2026-36784: Stack-based Buffer Overflow
Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain a stack overflow in the ip parameter of the fromNetToolGet function. This vulnerability allows attackers to cause a Denial of Service DoS via a HTTP request...
Tenda O3 缓冲区错误漏洞
The Tenda O3 is an outdoor wireless bridge produced by the Chinese company Tenda. The Tenda O3 Wireless Router version 1.0.0.54180 contains a security vulnerability. This vulnerability stems from multiple stack overflows in the puVar2, puVar1, s2, s100, and puVar3 parameters within the...
CVE-2026-36783
Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain a stack overflow in the domain parameter of the fromNetToolGet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
FreeSWITCH 安全漏洞
FreeSWITCH is a free and open-source communication software developed by Anthony Minessale, an individual developer from the United States. This software can be used to create audio, video, and messaging-related products and applications. Prior to FreeSWITCH version 1.11.1, there were security...
CVE-2026-36793
The Tenda W3 Wireless Router (version v1.0.0.3(2204) ) is susceptible to multiple stack overflows within the formwrlSSIDset function. The vulnerability is triggered via the mit_ssid and mis_ssid_index parameters. An unauthenticated attacker can exploit these flaws by sending a crafted HTTP reques...
PT-2026-48178
Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the Go parameter of the ask to reboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-36778
Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain a stack overflow in the username parameter of the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2026-36773
Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the Go parameter of the asktoreboot function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-48177
Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wl radio parameter of the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-49847: Uncontrolled Recursion
FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, a single unauthenticated WebSocket frame containing a deeply nested JSON document crashes...
EulerOS 2.0 SP11 : ncurses (EulerOS-SA-2026-2255)
According to the versions of the ncurses packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : The infocmp command-line tool in ncurses before 6.5-20251213 has a stack-based buffer overflow in analyzestring in progs/infocmp.c.CVE-2025-69720...
Adobe Reader < 26.001.21662 Multiple Vulnerabilities (APSB26-63) (macOS)
The version of Adobe Reader installed on the remote macOS host is a version prior to 26.001.21662. It is, therefore, affected by multiple vulnerabilities. - Acrobat Reader versions 24.001.30365, 26.001.21651 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result...
CVE-2026-36772: Stack-based Buffer Overflow
Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router v1.0.0.32204 was discovered to contain a stack overflow in the wlradio parameter of the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2026-36773
The Shenzhen Tenda Technology Co., Ltd Tenda W3 Wireless Router (version v1.0.0.3(2204) ) is vulnerable to a stack overflow within the Go parameter of the ask_to_reboot function. An attacker can exploit this flaw by providing crafted input to trigger a Denial of Service (DoS) . No specific remedi...
CVE-2026-36778: Stack-based Buffer Overflow
Shenzhen Tenda Technology Co., Ltd Tenda O3 Wireless Router v1.0.0.54180 was discovered to contain a stack overflow in the username parameter of the R7WebsSecurityHandler function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2026-36778
The Tenda O3 Wireless Router (v1.0.0.5(4180)) is susceptible to a stack overflow vulnerability within the R7WebsSecurityHandler function. This flaw is triggered by a crafted HTTP request targeting the username parameter . A successful exploit allows an unauthenticated attacker to cause a Denial o...