CVE-2025-5903 TOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow

A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the...

CVE-2025-5568

creationtimestamp| type| source ---|---|--- 2025-06-07 14:57:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzmd7zs4b2q 2025-06-09 16:56:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17710...

CVE-2025-38000

A flaw was found in the HFSC queueing discipline implementation in the Linux kernel. When a packet is enqueued and the child qdisc's peek function is called before properly updating the HFSC queue's length and backlog counters, a race condition can occur. In some cases, the peek operation may...

CVE-2025-5715

creationtimestamp| type| source ---|---|--- 2025-06-06 05:08:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw2vuxfr22s 2025-06-06 10:10:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635874812023399...

CVE-2025-5573

creationtimestamp| type| source ---|---|--- 2025-06-04 07:23:54+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lqrbimhqv7h2...

CVE-2025-5439

creationtimestamp| type| source ---|---|--- 2025-06-02 11:11:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmncyinzqa2...

CVE-2023-42439

GeoNode is an open source platform that facilitates the creation, sharing, and collaborative use of geospatial data. A SSRF vulnerability exists starting in version 3.2.0, bypassing existing controls on the software. This can allow a user to request internal services for a full read SSRF, returni...

CVE-2025-37912

No description is available for this CVE...

CVE-2025-43545

creationtimestamp| type| source ---|---|--- 2025-05-13 19:21:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp36v6kvlo32 2025-05-13 20:48:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eaf546m2j 2025-05-13...

CVE-2025-47814

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflateread called indirectly from spvreadxmlmember in zip-reader.c...

CVE-2023-53109

In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev-neededheadroom IP tunnels can apparently update dev-neededheadroom in their xmit path. This patch takes care of three tunnels xmit, and also the core LLRESERVEDSPACE and...

CVE-2025-29451

creationtimestamp| type| source ---|---|--- 2025-04-17 21:58:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12372 2025-04-17 22:53:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln274pajc52y 2025-04-18 00:41:40+00:00| seen|...

CVE-2025-32824

A vulnerability has been identified in TeleControl Server Basic All versions V3.1.2.2. The affected application is vulnerable to SQL injection through the internally used 'UnlockProject' method. This could allow an authenticated remote attacker to bypass authorization controls, to read from and...

CVE-2025-30722

...

CVE-2025-30683

...

CVE-2025-21584

...

CVE-2025-28136

TOTOLINK A800R (firmware V4.1.2cu.5137_B20200730) contains a buffer overflow in the downloadFile.cgi component. The issue arises from improper validation of input data length in that CGI, with impact described as a buffer overflow (CVSS-ish context indicates Network access with low attack complex...

CVE-2025-26666

Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally...

CVE-2025-27782

creationtimestamp| type| source ---|---|--- 2025-03-19 23:00:21+00:00| seen| https://t.me/cvedetector/20672 2025-03-19 23:33:39+00:00| published-proof-of-concept| Telegram/e8K6ei2MJobaYeBw9lEyjrqpWhjWmsfq7ceAEPONUHatpcs 2025-03-20 00:49:11+00:00| seen|...

CVE-2025-30153

A flaw was found in kin-openapi. This vulnerability allows excessive memory consumption via upload of a crafted ZIP file a "ZIP bomb". Mitigation Disable any endpoints in your OpenAPI schema that allows multipart/form-data or allows the uploading of a zipfile...