CVE-2025-28021

TOTOLINK A810R is affected by a buffer overflow in downloadFile.cgi via the v14 and v3 parameters on firmware version 4.1.2cu.5182_B20201026. The underlying issue is described across multiple sources as an input length/size validation failure, which may allow remote attackers to cause a crash or ...

CVE-2025-28025

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter...

CVE-2025-28024

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in the cstecgi.cgi...

CVE-2025-28027

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-28026

CVE-2025-28026 affects TOTOLINK routers: A830R (v4.1.2cu.5182_B20201102), A950RG (v4.1.2cu.5161_B20200903), A3000RU (v5.9c.5185_B20201128), and A3100R (v4.1.2cu.5247_B20211129) with a buffer overflow in the downloadFile.cgi component. The issue is a technical vulnerability in the firmware allowin...

CVE-2025-28024

TOTOLINK A810R v4.1.2cu.5182_B20201026 is affected by a buffer overflow in the cstecgi.cgi component. The vulnerability stems from improper input length/size validation, enabling a remote attacker to potentially execute arbitrary code or cause a denial of service. CVSSv3.1 base score 9.8 (CRITICA...

CVE-2025-28029

This CVE affects TOTOLINK devices: A830R (v4.1.2cu.5182_B20201102), A950RG (v4.1.2cu.5161_B20200903), A3000RU (v5.9c.5185_B20201128), and A3100R (v4.1.2cu.5247_B20211129). A buffer overflow was found in the cstecgi.cgi component. From the accompanying data, the impact is listed as low for confide...

CVE-2025-28032

The CVE-2025-28032 issue affects TOTOLINK router models A800R, A810R, A830R, A950RG, A3000RU, and A3100R, with a pre-auth buffer overflow in the setNoticeCfg function via the IpForm parameter. Root cause: buffer overflow in pre-auth code path. Impact is described as a vulnerability in the provide...

CVE-2025-28032

TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpForm paramet...

CVE-2025-28027

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 was found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-28027

CVE-2025-28027 affects TOTOLINK devices A830R (4.1.2cu.5182_B20201102), A950RG (4.1.2cu.5161_B20200903), A3000RU (5.9c.5185_B20201128), and A3100R (4.1.2cu.5247_B20211129) with a buffer overflow in downloadFile.cgi. CVSS 3.1 base score 7.3 (HIGH); attack vector: NETWORK, attack complexity: LOW, p...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10859)

PCMan FTP Server is a server software for File Transfer Protocol FTP. PCMan FTP Server suffers from a buffer overflow vulnerability that stems from the failure of the DIR Command Handler module DIR Command Handler to properly handle a specific request. No detailed vulnerability details are provid...

CVE-2025-28033

TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the...

PCMan FTP Server Buffer Overflow Vulnerability (CNVD-2025-10862)

PCMan FTP Server is a server software for File Transfer Protocol FTP. A buffer overflow vulnerability exists in PCMan FTP Server that stems from the MPUT Command Handler failing to properly process input data when processing a specific request. No detailed vulnerability details are available at...

CVE-2025-28026

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-29625

Summary of CVE-2025-29625 (Astrolog v7.70) : A buffer overflow in the FileOpen function is triggered by an overly long environment variable, allowing attackers to execute arbitrary code or cause a DoS. The vulnerability is described as LOCAL with LOW privileges required and NO user interaction. P...

Adobe XMP Toolkit Buffer Overflow Vulnerability (CNVD-2025-08786)

Adobe XMP Toolkit is a toolkit from the American company Audobee Adobe. Used to integrate Xmp functionality into a product or solution. Adobe XMP Toolkit has a buffer overflow vulnerability that originates from an out-of-bounds read, which can be exploited by an attacker to obtain sensitive...

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2025-09274)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe After Effects, which stems from a failure to properly handle read operations at memory boundaries and can be exploited by...

CVE-2025-42599

Active! mail 6 BuildInfo: 6.60.05008561 and earlier contains a stack-based buffer overflow vulnerability. Receiving a specially crafted request created and sent by a remote unauthenticated attacker may lead to arbitrary code execution and/or a denial-of-service DoS condition. Recent assessments:...

Adobe XMP Toolkit Buffer Overflow Vulnerability

Adobe XMP Toolkit is a toolkit from the American company Audobee Adobe. Used to integrate Xmp functionality into a product or solution. Adobe XMP Toolkit suffers from a buffer overflow vulnerability that originates from an out-of-bounds read, which can be exploited by an attacker to cause a...