5636 matches found
EUVD-2025-35360
NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...
CVE-2025-11411 Possible domain hijacking via promiscuous records in the authority section
NLnet Labs Unbound up to and including version 1.24.1 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive DNS replies in the authority section can be used to trick resolvers to update their delegation information for the zone. Usually these RRSets are...
PT-2025-43379
Name of the Vulnerable Software and Affected Versions BIND versions 9.18.0 through 9.18.39 BIND versions 9.20.0 through 9.20.13 BIND versions 9.21.0 through 9.21.12 BIND versions 9.18.11-S1 through 9.18.39-S1 BIND versions 9.20.9-S1 through 9.20.13-S1 Description Querying for records within a...
The vulnerability of the sscanf() function in Tenda AC20 router software allows a hacker to execute arbitrary code or cause service interruptions.
The vulnerability of the sscanf function in Tenda AC20 router software lies in the issue of the operation exceeding the buffer boundaries in memory when processing the timeZone parameter in the /goform/fastsettingwifiset command. Exploiting this vulnerability allows a remote attacker to execute...
PT-2025-44391
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue was addressed in the Linux kernel related to the btrfs filesystem. Specifically, the issue occurs when rejecting a non-SINGLE data profile without a RAID stripe tree...
CVE-2025-27060 Untrusted Pointer Dereference in TZ Firmware
Memory corruption while performing SCM call with malformed inputs...
CVE-2025-27059 Use of Out-of-range Pointer Offset in TZ Firmware
Memory corruption while performing SCM call...
CVE-2025-27040 Improper Input Validation in TZ Firmware
Information disclosure may occur while processing the hypervisor log...
CVE-2025-27040
CVE-2025-27040 affects Qualcomm TZ Firmware in chipsets; root cause is improper input validation when processing hypervisor logs, leading to information disclosure (confidentiality impact). Reported across Red Hat/NVD/CVE listings with no confirmed exploit details. Some sources note no public fix...
CVE-2025-11385
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fastsettingwifiset. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publi...
CVE-2025-11385
A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fastsettingwifiset. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publi...
CVE-2025-11385
The CVE-2025-11385 entry describes a buffer overflow in Tenda AC20 routers (up to version 16.03.08.12) caused by manipulating the timeZone argument in the sscanf usage within /goform/fast_setting_wifi_set. The underlying issue is a sscanf parameter handling overflow, allowing remote exploitation ...
EUVD-2010-4365
Malware in sbrugna...
EUVD-2010-4357
Malware in sbrugna...
EUVD-2017-0144
Malware in sbrugna...
EUVD-2020-24751
Malware in sbrugna...
EUVD-2011-4988
Malware in sbrugna...
EUVD-2020-29467
Malware in sbrugna...