EUVD-2018-17490

Malware in sbrugna...

CVE-2018-5721

CVE-2018-5721 refers to a stack-based buffer overflow in the ej_update_variables function within router/httpd/web.c on ASUS routers (via software from github.com/RMerl/asuswrt-merlin). The vulnerability occurs because the length of the variable action_script is not checked, as long as the value i...

CVE-2018-5721: Out-of-bounds Write

Stack-based buffer overflow in the ejupdatevariables function in router/httpd/web.c on ASUS routers when using software from https://github.com/RMerl/asuswrt-merlin allows web authenticated attackers to execute code via a request that updates a setting. In ejupdatevariables, the length of the...