260328 matches found
CVE-2026-76590
A stack-based buffer overflow exists in the ssi component of TRENDnet TEW-755AP (firmware up to 20260702). Manipulating the cameo.wan.wan_pppoe_password_00 argument in /cgi-bin/wan.cgi triggers overflow, exploitable remotely with low privileges; a public PoC is available at https://github.com/mei...
CVE-2026-76589
A stack-based buffer overflow in the FUN_401000 function of /sbin/mycli on TRENDnet TEW-755AP firmware up to 20260702 allows remote attackers to crash or take over the device by sending a crafted ssid argument. A proof-of-concept exploit exists at https://github.com/meishigana/CVE/blob/main/team1...
CVE-2026-76584
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
CVE-2026-18102
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...
CVE-2026-76584 TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
EUVD-2026-63094
A security flaw has been discovered in TRENDnet TV-IP751WIC 11.03.03. Affected by this issue is some unknown functionality of the file /cgi-bin/admin/settime.cgi of the component alphapd. The manipulation of the argument Currenttime results in stack-based buffer overflow. The attack can be launch...
CVE-2026-12634
In Zephyr's settings NVS backend (subsys/settings/src/settings_nvs.c), three functions (settings_nvs_cache_match, settings_nvs_load, settings_nvs_save) use the nvs_read() return value directly as a NUL-terminator index into 74-byte stack buffers without clamping, causing a single-byte out-of-boun...
CVE-2026-12522 Stack buffer overflow in Zephyr hl7800 modem driver parsing network-supplied +CGCONTRDP address fields
The HL7800 cellular modem driver's +CGCONTRDP: response handler oncmdatcmdinfoipaddr in drivers/modem/vendorstandalone/hl7800.c parses the PDP-context dynamic parameters local address, subnet mask, gateway, and DNS servers that the cellular network assigns to the device. The response is linearize...
CVE-2026-12522
Zephyr RTOS's on_cmd_atcmdinfo_ipaddr() in drivers/modem/vendor_standalone/hl7800.c uses attacker-controlled delimiter positions as strncpy() length into fixed 64/16-byte buffers, causing stack overflow in supervisor context. A rogue base station can trigger crashes or control-flow hijacking. Fix...
CVE-2026-18102 IBM i Buffer Overflow
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...
CVE-2026-18102
IBM i versions 7.3 through 7.6 are affected by a heap-based buffer overflow (CWE-122) caused by an integer underflow during bounds checking, allowing a remote authenticated attacker to overwrite adjacent memory. CVSS 3.5 LOW. IBM provides PTFs: MJ10886 (7.6), MJ10885 (7.5), MJ10884 (7.4), MJ10883...
EUVD-2026-62853
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to overwrite adjacent memory due to an integer underflow during bounds checking...
CVE-2026-38754 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-38752 vulnerabilities
Vulnerabilities for packages: busybox...
GHSA-FJ27-X67R-V4G5 vulnerabilities
Vulnerabilities for packages: busybox...
GHSA-9R55-P3JW-V652 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-38753 vulnerabilities
Vulnerabilities for packages: busybox...
CVE-2026-38755 vulnerabilities
Vulnerabilities for packages: busybox...
