CVE-2025-12295 D-Link DAP-2695 Firmware Update sub_40C6B8 signature verification

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are...

D-Link DAP-2695 数据伪造问题漏洞

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China AUO D-Link. A data forgery issue vulnerability exists in the D-Link DAP-2695 version 2.00RC13, which stems from the function sub40C6B8 in the Firmware Update Handler component not properly verifying the...

PT-2025-43874

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A stack-based buffer overflow exists in the SetValue/GetValue function within the /goform/sysAutoReboot file of Tenda O3. Manipulation of the enable argument can trigger this issue, allowing for remote...

PT-2025-43869

Name of the Vulnerable Software and Affected Versions Tenda O3 version 1.0.0.102478 Description A flaw exists in the SetValue/GetValue function within the /goform/setDhcpConfig file of the Tenda O3 router. Manipulation of the dhcpEn argument can trigger a stack-based buffer overflow, potentially...

PT-2025-43985

A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub 4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may b...

PT-2025-43984

A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub 40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature ar...

D-Link DAP-2695 操作系统命令注入漏洞

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China AUO D-Link. An OS command injection vulnerability exists in the D-Link DAP-2695 version 2.00RC13, which originates from the presence of os command injection in the function sub4174B0 in the Firmware Update Handle...

PT-2025-43917

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R that could lead to a stack-based buffer overflow. The issue is located in the setOpModeCfg function within the /cgi-bin/cstecgi.cg file, specifically...

CVE-2025-56438

An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card...

Nous W3 安全漏洞

Nous W3 is a webcam from the Polish company Nous. A security vulnerability exists in Nous W3 version 1.33.50.82, which stems from a flaw in the firmware update mechanism that allows an attacker in physical proximity to elevate privileges to root via a specially crafted update.tar archive file...

CVE-2025-34500

CVE-2025-34500 affects Deck Mate 2. The firmware update mechanism accepts unsigned packages, uses a single hard-coded AES key for encryption, and applies a truncated HMAC for integrity, enabling an attacker with USB/update-interface access to craft/modify firmware to execute arbitrary code as roo...

PT-2025-43634

Name of the Vulnerable Software and Affected Versions D-Link DIR600LAx version FW116WWb01 Description The D-Link DIR600LAx firmware version FW116WWb01 contains a buffer overflow. This occurs through the curTime parameter in the formSetQoS function. Recommendations Update to a newer firmware versi...

PT-2025-43637

Name of the Vulnerable Software and Affected Versions Nous W3 Smart WiFi Camera version 1.33.50.82 Description A flaw exists in the firmware update process of the Nous W3 Smart WiFi Camera. An attacker in close physical proximity, without needing to authenticate, can gain root access by providing...

CVE-2025-56438

An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card...

CVE-2025-56438

An issue in the firmware update mechanism of Nous W3 Smart WiFi Camera v1.33.50.82 allows unauthenticated and physically proximate attackers to escalate privileges to root via supplying a crafted update.tar archive file stored on a FAT32-formatted SD card...

PT-2025-43638

Name of the Vulnerable Software and Affected Versions D-Link DIR600L Ax version FW116WWb01 Description The D-Link DIR600L Ax firmware version FW116WWb01 contains a buffer overflow. This occurs through the curTime parameter within the formSetEnableWizard function. Recommendations Update to a newer...

Security Bulletin: IBM MQ Appliance is affected by a denial of service vulnerability (CVE-2025-48976)

Summary IBM MQ appliance has addressed a denial of service vulnerability. Vulnerability Details CVEID:CVE-2025-48976 DESCRIPTION: Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons...

CLSA-2025-1761073890 Update of linux-firmware

Addition AMD CPU microcode for processor family 0x1a: cpuid:0x00B00F21ver:0x0B002151, cpuid:0x00B10F10ver:0x0B10104E; - Update AMD CPU microcode for processor family 0x19: cpuid:0x00A00F11ver:0x0A0011DE, cpuid:0x00A00F12ver:0x0A001247, cpuid:0x00A00F82ver:0x0A00820D,...

AMD TPM Reference Implementation June 2025 Security Update

AMD has informed HP of a potential security vulnerability identified in AMD Firmware TPM fTPM, which might allow information disclosure and/or denial of service. AMD has released Platform Initialization PI firmware to mitigate the vulnerability. AMD has released updates to mitigate the potential...

D-Link DAP-2695 Operating System Command Injection Vulnerability

The D-Link DAP-2695 is a high-performance dual-band wireless access point from China's AUO D-Link. The D-Link DAP-2695 version 2.00RC131 suffers from an operating system command injection vulnerability, which originates from the failure of the function fwupdatermain of the component Firmware Upda...