The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software of Tenda AC6 allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formWifiWpsOOB function in the microprogrammed routing software Tenda AC6 is related to data writing beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...

The vulnerability of the formSetPPTPServer() function in the Tenda AC7 router’s microprogramming software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the formSetPPTPServer function in the Tenda AC7 router’s microprogramming software is related to the operation of writing data outside of the buffer in memory when processing the pptpserverstartip and pptpserverendip parameters. Exploiting this vulnerability allows a remote...

The vulnerability in the displaydebug_section function of the readelf.c component of the GNU Binutils development environment allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the displaydebugsection function in the readelf.c component of the GNU Binutils development environment is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause...

The vulnerability of the x86/mm kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the x86/mm kernel component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dcmnet component of the library for working with DICOM format allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the dcmnet component of the library for working with DICOM format in DCMTK is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause...

The vulnerability of the JPEG2000Codec::DecodeByStreamsCommon function in the DICOM image processing tool Grassroots DiCoM allows a perpetrator to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the JPEG2000Codec::DecodeByStreamsCommon function, a tool for working with DICOM images in Grassroots DiCoM, is related to the output of operations that go beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain access to confidenti...

The vulnerability of the NFSD component in the Linux operating system’s kernel allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the NFSD component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CVE-2025-31332

Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this...

CVE-2025-31332

CVE-2025-31332 concerns insecure file permissions in SAP BusinessObjects Business Intelligence Platform. A local attacker could modify files, potentially disrupting operations or causing service downtime, leading to high impact on integrity and availability . The vulnerability does not disclose s...

PT-2025-15378

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform affected versions not specified Description: The issue is related to insecure file permissions in the SAP BusinessObjects Business Intelligence Platform. An attacker with local access to the...

GeoVision GV-ASManager 6.1.0.0 - Information Disclosure

Exploit Title: Information Disclosure in GeoVision GV-ASManager Google Dork: inurl:"ASWeb/Login" Date: 02-FEB-2025 Exploit Author: Giorgi Dograshvili DRAGOWN Vendor Homepage: https://www.geovision.com.tw/ Software Link: https://www.geovision.com.tw/download/product/ Version: 6.1.0.0 or less Teste...

The vulnerability of the R7WebsSecurityHandler function in the microprogramming software for Tenda AC10 routers allows a hacker to induce a service failure.

The vulnerability of function R7WebsSecurityHandler in the Tenda AC10 router software is related to the possibility of writing data outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the ReadJXLImage() function in the GraphicsMagick graphics editor allows a hacker to cause a service failure.

The vulnerability of the ReadJXLImage function in the GraphicsMagick graphics editor is related to the unlimited distribution of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ShutdownSetAdd() function in Tenda AC10 router software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the ShutdownSetAdd function in Tenda AC10 router microprogramming software is related to the operation of writing data outside the buffer in memory when processing the length parameter “time”. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or...

Vulnerability of the optee_supp_thrd_req() function (drivers/tee/optee/supp.c) in the Linux kernel, allowing a hacker to cause a service failure

The vulnerability of the opteesuppthrdreq function drivers/tee/optee/supp.c in the Linux kernel is related to incorrect blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-0676

This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to errors during initialization of variables, allowing attackers to trigger a service failure and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to errors during initialization of variables. Exploiting this vulnerability can allow attackers to cause service failures and gain unauthorized access to protected information using a specially created...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the SoupWebsocketConnection accepting a large WebSocket message, which may cause memory allocation issues leading to system unavailability. An attacker can disrupt service by...

CVE-2024-47214

An issue was discovered in Iglu Server 0.13.0 and below. It is similar to CVE-2024-47212, but involves a different kind of malicious payload. As above, it can render Iglu Server completely unresponsive. If the operation of Iglu Server is not restored, event processing in the pipeline would...

The vulnerability of Juniper Networks Junos OS routers in the MX-SPC3 series arises from a improper release of memory before deleting the last link (“memory leak”), allowing an attacker to cause a service failure.

The vulnerability of Juniper Networks Junos OS routers in the MX-SPC3 series is related to improper memory release before deleting the last link “memory leak”. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...