CVE-2025-22881

Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current...

DEBIAN-CVE-2022-49374

In the Linux kernel, the following vulnerability has been resolved: tipc: check attribute length for bearer name syzbot reported uninit-value: ===================================================== BUG: KMSAN: uninit-value in stringnocheck lib/vsprintf.c:644 inline BUG: KMSAN: uninit-value in...

CVE-2022-49058 cifs: potential buffer overflow in handling symlinks

In the Linux kernel, the following vulnerability has been resolved: cifs: potential buffer overflow in handling symlinks Smatch printed a warning: arch/x86/crypto/poly1305glue.c:198 poly1305updatearch error: memcpy 'dctx-buf' too small 16 vs u32max It's caused because Smatch marks 'linklen' as...

Delta Electronics CNCSoft-G2 安全漏洞

Delta Electronics CNCSoft-G2 is a human-machine interface HMI software from Delta Electronics, China. The Delta Electronics CNCSoft-G2 suffers from a buffer overflow vulnerability that originates from insufficient validation of user-supplied data lengths, which can be exploited by an attacker to...

PT-2025-8231

Name of the Vulnerable Software and Affected Versions Delta Electronics CNCSoft-G2 affected versions not specified Description The issue arises from a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be exploited if a...

WAVLINK WL-WN575A3 Buffer Overflow Vulnerability

WAVLINK WL-WN575A3 is a wireless network signal extender from China RuiYin WAVLINK. The WAVLINK WL-WN575A3 suffers from a buffer overflow vulnerability that stems from a lack of length validation, and no details of the vulnerability are provided at this time...

D-Link DIR-853 安全漏洞

The D-Link DIR-853 is a dual-band wireless router that supports the 802.11ac protocol and provides dual-band 2.4GHz up to 400Mbps and 5GHz up to 867Mbps network connectivity for HD video streaming and online gaming. The D-Link DIR-853 suffers from a buffer overflow vulnerability that originates...

WAVLINK WL-WN575A3 安全漏洞

WAVLINK WL-WN575A3 is a wireless network signal extender from China RuiYin WAVLINK. The WAVLINK WL-WN575A3 suffers from a buffer overflow vulnerability that stems from a lack of length validation, and no details of the vulnerability are provided at this time...

Mercury MIPC552W 安全漏洞

Mercury MIPC552W is a webcam from Mercury China. A security vulnerability exists in Mercury MIPC552W v1.0, which stems from a lack of length validation and a buffer overflow vulnerability that could cause the remote target device to crash or execute arbitrary commands...

Linksys WAP610N 安全漏洞

The Linksys WAP610N is a Wireless N Access Point supporting the 802.11n standard from Linksys, Inc. A security vulnerability exists in Linksys WAP610N version v1.0.05.002, which stems from a lack of length validation and a buffer overflow vulnerability that could cause the remote target device to...

Digital China Networks DCBC Gateway 安全漏洞

Digital China Networks DCBC Gateway is a gateway program from Digital China Networks China. A security vulnerability exists in Digital China Networks DCBC Gateway version 200-2.1.1, which stems from a lack of length validation and a buffer overflow vulnerability that could cause a remote target...

Ruijie Networks RG-NBR2600S 安全漏洞

Ruijie Networks RG-NBR2600S is a gateway device from Ruijie Networks China. A security vulnerability exists in Ruijie Networks RG-NBR2600S version 10.34b12, which stems from a lack of length validation, and a buffer overflow vulnerability that could cause a remote target device to crash or execut...

OESA-2025-1096 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOBs in smb2parsecontexts Validate offsets and lengths before dereferencing create contexts in smb2parsecontexts. This fixes following...

PT-2025-5905 · Delta Electronics · Cncsoft-G2

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This can be leveraged b...

PT-2025-5794 · Mintty · Mintty

Name of the Vulnerable Software and Affected Versions: Mintty affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Mintty. User interaction is required to exploit this issue, where the target must visit a malicious...

PT-2025-1587

Name of the Vulnerable Software and Affected Versions Apache HTTP Server affected versions not specified Description The issue concerns a lack of proper validation of the length of user input in the http server get content type from extension function. This could potentially lead to exploitation...

Zephyr 安全漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr 3.7 and earlier versions that stems from a lack of proper validation of the length of user input...

Silicon Gecko OS 安全漏洞

Silicon Gecko OS is a highly optimized but feature-rich IoT operating system from Silicon, Inc. A security vulnerability exists in Silicon Gecko OS that stems from a missing data length validation of the httpdownload command...

AutomationDirect C-More EA9 Programming Software 安全漏洞

AutomationDirect C-More EA9 Programming Software is a programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect C-More EA9 Programming Software that stems from a lack of proper validation of the length of user-supplied data when parsing an EAP9 file,...

Linksys E8450 安全漏洞

The Linksys E8450 is a router from Linksys, USA. A security vulnerability exists in the Linksys E8450 v1.2.00.360516, which stems from the ipv6protectstatus parameter being copied to the stack without length validation, resulting in the inclusion of a buffer overflow vulnerability...