CVE-2025-25529

Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

TP-LINK TL-WR841ND 安全漏洞

TP-LINK TL-WR841ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK TL-WR841ND V11 version, which originates from the ip parameter of /userRpm/WanStaticIpV6CfgRpm.htm contains a buffer overflow vulnerability...

CVE-2024-37600

CVE-2024-37600 concerns Mercedes-Benz NTG (MBUX) head units (6 through 2021) with a stack buffer overflow in the Service Broker service (MoCCA). Exploitation requires physical access to the head unit’s base-board Ethernet pins and a static IP on the internal network; an attacker can send crafted ...

aiohttp: XSS on index pages for static file handling

A flaw was found in aiohttp, an asynchronous HTTP client/server framework for asyncio and Python. When using "web.static..., showindex=True", the resulting index pages do not escape file names. If users can upload files with arbitrary filenames to the static directory, the server is vulnerable to...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: staticcall: Replace the unnecessary WARNON call in staticcallmodulenotify. staticcallmodulenotify triggers a WARNON when memory allocation fails in staticcalladdmodule. This approach isn’t really justified, because the failure ca...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: netdevsim: A trailing zero was added to terminate the string in nsimnexthopbucketactivitywrite. This issue was identified by a static analyzer. We should not forget the trailing zero after copyfromuser if we will perform further...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: wl128x – Fix for atomicity violation in fmcsendcmd An atomicity violation occurs when the fmcsendcmd function is executed simultaneously with the modification of the fmdev-respskb value. Consider a scenario where, after...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: vmci: Speculation leaks were prevented by sanitizing the event in eventdeliver. Coverity identified that eventmsg is controlled by user-space. eventmsg-eventdata.event is passed to eventdeliver and used as an index without proper...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: dvbdev: The risk of out-of-memory access has been prevented. The dvbdev module contains a static variable used to store dvb minors. Its behavior depends on whether CONFIGDVBDYNAMICMINORS is set or not. When it is not set,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: Fixed the issue where corrupted pointer deletion occurred in cases of region creation failures. In cases where region creation fails in ipcdevlinkcreateregion, the previously created regions are deleted using a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: aspeedudc: validate endpoint index for ast udc We should verify the binding of the array to ensure that the host cannot manipulate the index to point beyond the endpoint array. This issue was identified through a...

CVE-2025-25529

Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands...

CVE-2025-25529

CVE-2025-25529 affects Digital China DCBC Gateway 200-2.1.1. The vulnerability is a buffer overflow caused by lack of length verification in NAT rule configuration. Impact stated: remote device crash or arbitrary command execution. CVSS v3.1 base score 5.1 (Medium), attack vector Local, no privil...

PT-2025-6383 · Digital China · Digital China Dcbc Gateway

Name of the Vulnerable Software and Affected Versions: Digital China DCBC Gateway version 200-2.1.1 Description: The issue is related to a buffer overflow vulnerability due to the lack of length verification, which is connected to the configuration of static NAT rules. This can cause the remote...

Azure Linux 3.0 Security Update: mariadb (CVE-2023-6935)

The version of mariadb installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-6935 advisory. - wolfSSL SP Math All RSA implementation is vulnerable to the Marvin Attack, new variation of a timing...

Azure Linux 3.0 Security Update: kernel (CVE-2024-50002)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50002 advisory. - In the Linux kernel, the following vulnerability has been resolved: staticcall: Handle module init failure...

Exploit for CVE-2024-38819

CVE-2024-38819 01. File-Traversal와 Webflux 개요 - 1 File...

CVE-2025-1086 Safetytest Cloud-Master Server static path traversal

A vulnerability has been found in Safetytest Cloud-Master Server up to 1.1.1 and classified as critical. This vulnerability affects unknown code of the file /static/. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2025-1086

The CVE-2025-1086 entry concerns Safetytest Cloud-Master Server (up to version 1.1.1). The issue is a path traversal in files under /static/ exploitable via remote access (../filedir). Public exploit/info has circulated; vendor response is not documented. Affected component/impact details beyond ...

Safetytest Cloud-Master Server 安全漏洞

Safetytest Cloud-Master Server is a cloud server from Safetytest, Inc. A security vulnerability exists in Safetytest Cloud-Master Server version 1.1.1 and earlier, which originates from the file /static/ that causes path traversal...