CVE-2025-4448

A vulnerability classified as critical was found in D-Link DIR-619L 2.04B04. This vulnerability affects the function formEasySetupWizard. The manipulation of the argument curTime leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure...

CVE-2025-4356

A vulnerability was found in Tenda DAP-1520 1.10B04BETA02. It has been declared as critical. This vulnerability affects the function modgraphauthurihandler of the file /storage of the component Authentication Handler. The manipulation leads to stack-based buffer overflow. The attack can be...

CVE-2025-4253

A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HASH Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed t...

CVE-2025-4342 D-Link DIR-600L formEasySetupWizard3 buffer overflow

A vulnerability, which was classified as critical, has been found in D-Link DIR-600L up to 2.07B01. Affected by this issue is the function formEasySetupWizard3. The manipulation of the argument host leads to buffer overflow. The attack may be launched remotely. This vulnerability only affects...

CVE-2025-4289

Summary: CVE-2025-4289 affects PCMan FTP Server 2.0.7, در RNTO Command Handler component, causing a buffer overflow. The issue can be triggered remotely, and the exploit has been disclosed publicly. Several sources corroborate the vulnerability in the RNTO processor, with varying CVSS assessments...

CVE-2025-4252

PCMan FTP Server 2.0.7 contains a buffer overflow in the APPEND Command Handler. The input length/size is not properly validated, enabling remote exploitation that could allow arbitrary code execution or a denial of service. Multiple sources confirm the vulnerability and that exploits have been d...

CVE-2025-4240

CVE-2025-4240 affects PCMan FTP Server 2.0.7, with a buffer overflow in the LCD Command Handler that can be exploited remotely. The vulnerability is described as critical (NVD CVSSv3.1 base score 9.8; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and has been publicly disclosed. Connected sources corrobor...

CVE-2025-4237

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component MDELETE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the publ...

CVE-2025-4114

A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function checklanguagefile. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but...

CVE-2025-4181

PCMan FTP Server 2.0.7 is affected by a SEND Command Handler buffer overflow vulnerability. The issue stems from insufficient input length validation in the SEND Command Handler, enabling remote exploitation and potential denial of service. Several connected sources confirm the vulnerability and ...

CVE-2025-4150 Netgear EX6200 sub_54340 buffer overflow

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the function sub54340. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure but...

CVE-2025-4120

Netgear JWNR2000v2 is affected by a buffer overflow in the sub_4238E8 function when processing the host argument (version 1.0.0.11). This vulnerability can be exploited remotely, and the issue is confirmed across multiple sources (CNVD-2025-10402, Red Hat CVE page, CVE listing). No explicit explo...

CVE-2025-4114 Netgear JWNR2000v2 check_language_file buffer overflow

A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function checklanguagefile. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but...

CVE-2025-3991 TOTOLINK N150RT formWdsEncrypt buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boafrm/formWdsEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-3723

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component MDTM Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may b...

CVE-2025-3380

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is some unknown functionality of the component FEAT Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed t...

CVE-2025-3372

A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component MKDIR Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...

CVE-2025-3346

A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptpserverstartip/pptpserverendip leads to buffer overflow. The attack may be launched...

CVE-2025-2754

CVE-2025-2754 affects Open Asset Import Library Assimp 5.4.3, specifically the AC3D File Handler’s AC3DImporter::ConvertObjectSection in code/AssetLib/AC/ACLoader.cpp. The argument manipulation causes a heap-based buffer overflow. The vulnerability is remotely exploitable and has had an exploit d...

CVE-2025-2754 Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the...