TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the improper handling of the staticgw parameter by the boa formIpv6Setup static network configuration function. A stack buffer overflow may allow attackers to execute arbitrary code through authenticated HTTP...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the static network configuration feature of boa formIpv6Setup, where the staticdns1 parameter involves a stack buffer overflow. Attackers can exploit this vulnerability through authenticated HTTP requests,...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the formMapDelDevice function of boa. A specially crafted HTTP request can lead to arbitrary code execution; attackers can exploit this flaw by sending authenticated HTTP requests...

curl resource management error vulnerability

The curl version 7.56.0 to 8.22.0 contains a resource management vulnerability. This vulnerability arises from constructing deeply nested multipart MIME structures using public APIs, leading to a libcurl stack overflow during normal cleanup operations. Additionally, the recursive depth of...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which may allow remote authenticated attackers to execute arbitrary code...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formUploadFile function. Authorized attackers can trigger this vulnerability through specially crafted HTTP requests, allowing arbitrary code to execute...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from a stack buffer overflow in the boa formIpQos mac function. Attackers can exploit this vulnerability by sending specially crafted HTTP requests, resulting in arbitrary code execution...

TOTOLINK X2000R Buffer Error Vulnerability

TOTOLINK X2000R V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from an stack buffer overflow in the vpnUser parameter of the boa formFilter function. It may allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the pppoedns1 parameter within the boa formIpv6Setup pppoe functionality, potentially allowing authenticated attackers to execute arbitrary code via specially crafted HTTP requests...

Exploit for CVE-2024-58299

Description This pull request addresses a security vulnerabil...

CVE-2026-112368 Unbounded Recursion in phongo_bson_visit_document/visit_array:

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-112368

The MongoDB PHP driver contains an uncontrolled recursion weakness (CWE-674) within its BSON decoding logic, specifically in the phongo_bson_visit_document/visit_array functions. An unauthenticated attacker can provide crafted binary document data to the decoder to exhaust the process stack. This...

CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

Unbounded Recursion in phongo_bson_visit_document/visit_array:

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

EUVD-2026-104414

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

Security update for python3, python3-base, python3-doc

This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. CVE-2026-9669: crafted input can cause a stack buffer...

SUSE-SU-2026:4744-1 Security update for python3, python3-base, python3-doc

This update for python3, python3-base, python3-doc fixes the following issues: Security issues fixed: - CVE-2026-6879: quadratic behavior in xml.etree.ElementPath index predicates can lead to a denial of service via high CPU usage bsc1273148. - CVE-2026-9669: crafted input can cause a stack buffe...

Security update for python36

This update for python36 fixes the following issues: Security issues fixed: CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives bsc1274743. CVE-2026-3219: pip doesn't reject concatenated ZIP bsc1262429...

SUSE-SU-2026:4743-1 Security update for python36

This update for python36 fixes the following issues: Security issues fixed: - CVE-2026-1703: files may be extracted outside the installation directory when installing and extracting maliciously crafted wheel archives bsc1274743. - CVE-2026-3219: pip doesn't reject concatenated ZIP bsc1262429. -...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the checkFailure function in the CXF SOAP consumer. An external caller can read internal class and package names and exception messages by sending a SOAP request that triggers an undeclared route failure; if CXF...