SUSE-SU-2025:0985-1 Security update for libarchive

This update for libarchive fixes the following issues: - CVE-2025-1632: Fixed null pointer dereference in bsdunzip.c bsc1237606 - CVE-2025-25724: Fixed buffer overflow vulnerability in function listitemverbose in tar/util.c bsc1238610...

CVE-2025-29149

Tenda i12 V1.0.0.103805 was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function...

SUSE-SU-2025:0958-1 Security update for ffmpeg-4

This update for ffmpeg-4 fixes the following issues: - CVE-2022-48434: Fixed use after free in libavcodec/pthreadframe.c bsc1209934 - CVE-2020-22021: Fixed Buffer Overflow vulnerability in filteredges function in libavfilter/vfyadif.c bsc1186586...

TOTOLINK EX1800T setPasswordCfg function buffer overflow vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a buffer overflow vulnerability that stems from the setPasswordCfg function failing to properly validate the length and size of the input data, which can be exploited by an...

TOTOLINK EX1800T setWiFiExtenderConfig function buffer overflow vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a buffer overflow vulnerability that originates from the setWiFiExtenderConfig function failing to correctly validate the length and size of the input data, which can be...

Tenda AC6 fromAddressNat function buffer overflow vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. A buffer overflow vulnerability exists in Tenda AC6 v15.03.05.16, which is caused by the fromAddressNat function failing to correctly validate the length of input data, and can be exploited by an attacker to execute arbitrary code...

RLSA-2024:10090 Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

vim security update

An update is available for vim. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Vim Vi IMproved is an updated and improved version of the vi editor. Security...

CVE-2025-2401 Buffer overflow in Immunity Debugger

Buffer overflow vulnerability in Immunity Debugger affecting version 1.85, its exploitation could allow a local attacker to execute arbitrary code, due to the lack of proper boundary checking...

Important: Red Hat Security Advisory: tigervnc security update

An update for tigervnc is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Telecommunications Update Service, and Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as...

Tenda RX3 /goform/setPptpUserList Buffer Overflow Vulnerability

The Tenda RX3 is a dual-band WiFi 6 home wireless router from China's Tenda. The Tenda RX3 /goform/setPptpUserList handles a buffer overflow vulnerability in the list parameter, which can be exploited by an attacker to submit a special request that can crash the service program and cause a denial...

Sante PACS Server EVP_DecryptUpdate Buffer Overflow Vulnerability

Sante PACS Server is a medical image management software developed for doctors to view CT in their daily consultations and improve the diagnosis rate. A buffer overflow vulnerability exists in the Sante PACS Server WEB service's EVPDecryptUpdate function that handles usernames and passwords, whic...

PT-2025-11400 · Totolink · Totolink Ex1800T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1800T versions 9.1.0cu.2112 B20220316 and earlier Description: A critical issue affects the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliSsid leads to a stack-based buffer...

CVE-2025-29030

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formWifiWpsOOB function...

CVE-2025-29029

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the formSetSpeedWan function...

CVE-2025-29032

CVE-2025-29032 affects Tenda AC9, specifically version v15.03.05.19(6318). The vulnerability is a buffer overflow in the formWifiWpsOOB function caused by improper validation of input length. Public sources consistently describe this as a memory-based overflow; CVSS 3.1 metrics indicate Network a...

CVE-2025-29031

Tenda AC6 v15.03.05.16 was discovered to contain a buffer overflow via the fromAddressNat function...

General Device Manager 2.5.2.2 Buffer Overflow

General Device Manager version 2.5.2.2 remote buffer overflow exploit that provides a reverse shell. Based on a discovery made in 2024 by Ahmet Ümit Bayram. ============================================================================================================================================...

CVE-2025-29360

The consolidated data confirms a buffer overflow in the Tenda RX3 router family (RX3) related to /goform/SetSysTimeCfg, exploitable via time and timeZone parameters. This vulnerability can be triggered by a crafted packet, leading to a Denial of Service. The affected product is the Tenda RX3, wit...

Santesoft Sante PACS Server 安全漏洞

Sante PACS Server is a medical image management software developed for doctors to view CT in their daily consultations and improve the diagnosis rate. A buffer overflow vulnerability exists in the Sante PACS Server WEB service's EVPDecryptUpdate function that handles usernames and passwords, whic...