Lucene search
+L

26008 matches found

Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.7 views

PT-2025-36906

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0br V15.11.0.17 Description: The Tenda G3 router contains a stack overflow in the pppoeServerWhiteMacIndex parameter within the formModifyPppAuthWhiteMac function. This issue allows attackers to cause a Denial of Service Do...

7.5CVSS6.8AI score0.00397EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/09/09 12:00 a.m.19 views

CVE-2025-57057

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the listStr parameter in the ipMacBindListStore function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

0.00489EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/09 12:00 a.m.13 views

PT-2025-36541

Name of the Vulnerable Software and Affected Versions: Tenda AC20 versions up to 16.03.08.12 Description: A buffer overflow exists in the web UI of Tenda AC20. The issue is located in the strcpy function within the /goform/GetParentControlInfo file. Manipulation of the mac argument can trigger th...

9CVSS9.1AI score0.0083EPSS
SaveExploits1References12
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.8 views

Microsoft AutoUpdate for Mac 后置链接漏洞

Microsoft AutoUpdate for Mac is a Microsoft product automatic update application for the Mac platform from Microsoft Corporation USA. Microsoft AutoUpdate for Mac suffers from a backlink vulnerability. An attacker can exploit the vulnerability to elevate privileges...

7.8CVSS6.5AI score0.00414EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/09 12:00 a.m.4 views

CVE-2025-57061

Tenda G3 v3.0brV15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

6.8AI score0.00489EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.9 views

Tenda AC20 安全漏洞

Tenda AC20 is a wireless router product from Tenda. A buffer overflow vulnerability exists in Tenda AC20 16.03.08.12 and earlier versions, which originates from the improper handling of the mac parameter in the strcpy function in the /goform/GetParentControlInfo file. The vulnerability can be...

9CVSS8.2AI score0.0083EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/09/09 12:00 a.m.26 views

Microsoft Word 安全漏洞

Microsoft Word is a word processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Word. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are affected:Microsoft...

7.1CVSS6.2AI score0.00626EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/09/09 12:00 a.m.20 views

CVE-2025-57061

Tenda G3 v3.0brV15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

0.00489EPSS
SaveExploits1References1
CVE
CVE
added 2025/09/09 12:00 a.m.23 views

CVE-2025-57057

Tenda G3 firmware v3.0br_V15.11.0.17 contains a stack/buffer overflow in the ipMacBindListStore function’s listStr parameter due to improper input length validation. This can allow an attacker to cause a Denial of Service (DoS) with a crafted request. Documented details are corroborated by multip...

7.5CVSS7.1AI score0.00489EPSS
SaveExploits1References1Affected Software1
RedHat Linux
RedHat Linux
added 2025/09/08 8:05 a.m.10 views

kernel: idpf: convert control queue mutex to a spinlock

In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2CAPMACFILTER enabled, the following warning is generated on module load: 324.701677 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578...

5.5CVSS6.8AI score0.00157EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2025/09/07 4:33 p.m.18 views

CVE-2024-0028

In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS6.7AI score0.00073EPSS
SaveExploits0References1
Gitee
Gitee
added 2025/09/06 12:30 a.m.282 views

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Apple Mac_Os_X

Mac&IOS HackStudy Mac&IOS安全学习资料汇总 Mac&IOS安全学习网站收集: http://samdmarshall.com https://www.exploit-db.com https://reverse.put.as http://highaltitudehacks.com/security/ http://www.dllhook.com/ http://www.securitylearn.net/archives/ http://securitycompass.github.io/iPhoneLabs/index.html...

9.3CVSS7.5AI score0.12671EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus
added 2025/09/06 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-39702

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for...

9.8CVSS6.5AI score0.00422EPSS
SaveExploits0References3
OSV
OSV
added 2025/09/05 6:15 p.m.16 views

AZL-73719 CVE-2025-39702 affecting package kernel for versions less than 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

9.8CVSS5.6AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/05 6:15 p.m.5 views

DEBIAN-CVE-2025-39702

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

9.8CVSS6AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/05 6:15 p.m.11 views

AZL-66941 CVE-2025-39702 affecting package kernel for versions less than 6.6.104.2-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

9.8CVSS5.6AI score0.00422EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/05 6:15 p.m.9 views

UBUNTU-CVE-2025-39702

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

9.8CVSS6.4AI score0.00422EPSS
SaveExploits0References34
ATTACKERKB
ATTACKERKB
added 2025/09/05 5:21 p.m.17 views

CVE-2025-39702

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: Fix MAC comparison to be constant-time To prevent timing attacks, MACs need to be compared in constant time. Use the appropriate helper function for this...

7CVSS5.2AI score0.00422EPSS
SaveExploits0References8Affected Software1
OSV
OSV
added 2025/09/05 5:15 p.m.6 views

CVE-2024-0028

In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

5.5CVSS5.9AI score0.00073EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/09/05 4:10 p.m.5 views

CVE-2024-0028

In Audio Service, there is a possible way to obtain MAC addresses of nearby Bluetooth devices due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.2AI score0.00073EPSS
SaveExploits0References1
Rows per page
Query Builder