Buffer overflow

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

The CVE-2020-29557 issue affects D-Link DIR-825 R1 devices with firmware up to 3.0.1 (pre-2020-11-20). A buffer overflow in the web interface enables pre-authentication remote code execution, i.e., an unauthenticated attacker could run arbitrary commands on the device. Related sources (OpenVAS NA...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8 when there is an NFS export of a subdirectory of a filesystem allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior

...

CVE-2020-29557: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution...

CVE-2020-29557

An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

D-Link DIR-825 buffer error vulnerability

The D-Link DIR-825 is a router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in D-Link DIR-825 R1 devices 3.0.1 and earlier versions, which originates from a buffer overflow in the web interface and can be exploited by an attacker to achieve remote code execution prior ...

Backdoor.Win32.Jokerdoor Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/6c7b364dafe0560dfb15c9b03f1b44bd.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jokerdoor TDC Mail Spy 1.0 Vulnerability: Insecure Permissions Description: This...

Backdoor.Win32.Whisper.b Remote Stack Corruption

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/a0edb91f62c8c083ec35b32a922168d1.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Whisper.b Vulnerability: Remote Stack Corruption Description: Whisper.b listens on TC...

CVE-2021-3178

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attac...

Denial of Service Vulnerability in DIR-878 at AUO Electronic Devices (Shanghai) Co.

AUO Electronic Equipment Shanghai Co., Ltd. is a company that mainly deals with network equipment, wireless equipment, switches and other items. A denial of service vulnerability exists in DIR-878 of AUO Electronic Devices Shanghai Ltd. that can be exploited by attackers to cause a denial of...

PT-2021-27524

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read error. Technical details include a crash type of Stack-buffer-overflow READ 2, and the crash state...

PT-2021-5507

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function FUN 8004776c, located in the /formVirtualServ endpoint. This vulnerability can be triggere...

PT-2021-5505

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 800462c4 function, located in the /formAdvFirewall endpoint. This issue can be triggered via a crafted POST...

PT-2021-5504

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue was found in the sub 80046EB4 function in the /formSetPortTr endpoint. This issue can be triggered via a crafted POST request...

PT-2021-5582

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the function FUN 80034d60 in the /formStaticDHCP endpoint. This issue can be triggered via a crafted POST request,...

PT-2021-5503

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 8004776c function, located in the /formVirtualApp endpoint. This issue can be triggered via a crafted POST...

PT-2021-5506

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 devices with firmware through DIR-809Ax FW1.12WWB03 20190410 Description A stack buffer overflow issue exists in the FUN 80040af8 function, located in the /formWlanSetup endpoint. This issue can be triggered via a crafted POST...

PT-2021-5502

Name of the Vulnerable Software and Affected Versions D-Link DIR-809 versions through DIR-809Ax FW1.12WWB03 20190410 Description The issue is related to a stack buffer overflow vulnerability in the function sub 8003183C in the /fromLogin endpoint. This vulnerability can be triggered via a crafted...