CVE-2025-34105 DiskBoss Enterprise Stack-Based Buffer Overflow RCE

A stack-based buffer overflow vulnerability exists in the built-in web interface of DiskBoss Enterprise versions 7.4.28, 7.5.12, and 8.2.14. The vulnerability arises from improper bounds checking on the path component of HTTP GET requests. By sending a specially crafted long URI, a remote...

CVE-2025-7571

A vulnerability classified as critical has been found in UTT HiPER 840G up to 3.1.1-190328. This affects an unknown part of the file /goform/aspApBasicConfigUrcp. The manipulation of the argument Username leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has be...

CVE-2025-7571 UTT HiPER 840G aspApBasicConfigUrcp buffer overflow

A vulnerability classified as critical has been found in UTT HiPER 840G up to 3.1.1-190328. This affects an unknown part of the file /goform/aspApBasicConfigUrcp. The manipulation of the argument Username leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has be...

libcurl SOCKS5 Heap Buffer Overflow Vulnerability (Oct 2023)

libcurl is prone to a heap buffer overflow vulnerability in the SOCKS5 proxy handshake. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2025-7548 Tenda FH1201 SafeEmailFilter formSafeEmailFilter stack-based overflow

A vulnerability has been found in Tenda FH1201 1.2.0.14408 and classified as critical. This vulnerability affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely...

CVE-2025-7468

CVE-2025-7468 describes a buffer overflow in the Tenda FH1201, affecting the HTTP POST Request Handler’s /goform/fromSafeUrlFilter. The root cause is improper validation of the page parameter in fromSafeUrlFilter, enabling remote exploitation. Affected product: Tenda FH1201 (1.2.0.14). Impact per...

CVE-2025-7468 Tenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow

A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attac...

CVE-2025-7423

CVE-2025-7423 affects Tenda O3V2 1.0.0.12(3880). The vulnerability is in the httpd component, function formWifiMacFilterSet in /goform/setWrlFilterList. Manipulating the macList argument causes a stack-based buffer overflow. This allows remote exploitation with the exploit publicly disclosed; pot...

CVE-2025-7417

A vulnerability has been found in Tenda O3V2 1.0.0.123880 and classified as critical. Affected by this vulnerability is the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument ip leads to stack-based buffer overflow. The attack can be...

PT-2025-29138 · Unknown · Easy File Sharing Ftp Server

Name of the Vulnerable Software and Affected Versions: Easy File Sharing HTTP Server version 7.2 Description: A stack-based buffer overflow vulnerability exists in the application. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long...

PT-2025-29845 · Gnu +1 · Gpac +1

Уязвимость функции gf media import утилиты MP4Box мультимедийной платформы GPAC связана с переполнением буфера на основе кучи. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

CVE-2025-7092

A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /goform/formWlanSetupWPS of the component webs. The manipulation of the argument wpsenroleepin/webpage leads to stack-based buffer overflow. Th...

CVE-2025-7117

A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknown code of the file /goform/websWhiteList. The manipulation of the argument addHostFilter leads to buffer overflow. The attack can be initiated remotely. The exploit has been...

CVE-2025-7116

CVE-2025-7116 affects the UTT Progress 750W router (up to version 3.2.2-191225). The vulnerability resides in handling of the ssid parameter in the file /goform/Fast_wireless_conf, where improper input processing leads to a buffer overflow. Exploitation can be performed remotely, and the public e...

HDF5 src/H5Centry.c file buffer overflow vulnerability

HDF5 is a library of HDF open source . HDF5 version 1.14.6 there is a buffer overflow vulnerability , the vulnerability stems from the file src/H5Centry.c function H5Cflushsingleentry fails to correctly validate the length of the input data size , a remote attacker can use this vulnerability on t...

CVE-2025-7091

A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. Affected is the function formWlanMP of the file /goform/formWlanMP of the component webs. The manipulation of the argument...

CVE-2025-7092

Affected product/versions: Belkin F9K1122, version 1.00.33. Vulnerability: In the webs component, the function formWlanSetupWPS in /goform/formWlanSetupWPS processes the wps_enrolee_pin/webpage parameter, causing a stack-based buffer overflow. This can be exploited remotely and has been publicly ...

PT-2025-29191 · Tenda · Tenda O3V2

Name of the Vulnerable Software and Affected Versions: Tenda O3V2 version 1.0.0.123880 Description: A critical vulnerability exists in Tenda O3V2. The setAutoReboot function within the /goform/setNetworkService file of the httpd component is affected. Manipulation of the week argument causes a...

PT-2025-29190 · Tenda · Tenda O3V2

Name of the Vulnerable Software and Affected Versions: Tenda O3V2 version 1.0.0.123880 Description: A vulnerability exists in Tenda O3V2. The issue affects the fromMacFilterModify function within the httpd component, located in the /goform/operateMacFilter file. Manipulation of the mac argument c...

PT-2025-27834 · Gstreamer · Gstreamer

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of GStreamer. Interaction with the library is required for exploitation, with attack vectors...