10253 matches found
CVE-2025-10123
A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub415028 of the file /goform/setstaticleases. Executing manipulation of the argument Hostname can lead to command injection. The attack can be launched remotely. The exploit has been...
CVE-2025-57058
Tenda G3 v3.0brV15.11.0.17 was discovered to contain multiple stack overflows in the formSetDebugCfg function via the pEnable, pLevel, and pModule parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
kernel: ext4: use-after-free in ext4_xattr_set_entry()
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw allows a privileged local user to cause a system crash or other undefined behaviors...
CVE-2025-57573
Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi...
Tenda F3 安全漏洞
Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability, which stems from the goform/setNAT file macFilterList parameter failing to properly validate the length size of the input data, which can be...
CVE-2025-57573
Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the wifiTimeClose parameter in goform/setWifi...
PT-2025-37062
Name of the Vulnerable Software and Affected Versions: Tenda F3 versions 12.01.01.48 and after Description: The Tenda F3 is susceptible to a buffer overflow issue through the wifiTimeClose parameter in the goform/setWifi endpoint. Recommendations: Update to a newer version that addresses this...
CVE-2025-57573
CVE-2025-57573 affects Tenda F3 routers (V12.01.01.48 and later) via goform/setWifi, where an input length validation issue in the wifiTimeClose parameter can trigger a buffer overflow. Documented impact is denial of service; exploitability details are not provided in the core sources, but PT-202...
Tenda F3 安全漏洞
Tenda F3 is a 300M wireless router launched on May 15, 2015 by Shenzhen Jixiang Tenda Technology Co. Tenda F3 suffers from a buffer overflow vulnerability that originates from the QosList parameter of the goform/setQoS file failing to properly validate the length size of the input data, which can...
Linux Distros Unpatched Vulnerability : CVE-2023-21031
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In setPowerMode of HWC2.cpp, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with no additional...
PT-2025-37061
Name of the Vulnerable Software and Affected Versions: Tenda F3 versions 12.01.01.48 multi and after Description: Tenda F3 versions 12.01.01.48 multi and after are susceptible to a buffer overflow issue through the onlineList parameter in the goform/setParentControl component. Recommendations: At...
Linux Distros Unpatched Vulnerability : CVE-2011-0116
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in the setOuterText method in the htmlelement library in WebKit, as used in Apple iTunes before 10.2 on Windows, allows...
CVE-2025-57571
Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow. via the macFilterList parameter in goform/setNAT...
CVE-2025-57570
Tenda F3 V12.01.01.48multi and after is vulnerable to Buffer Overflow via the QosList parameter in goform/setQoS...
CVE-2025-57087
Tenda W30E V16.01.0.19 5037 was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CVE-2025-57087
Tenda W30E V16.01.0.19 5037 was discovered to contain a stack overflow in the countryCode parameter in the werlessAdvancedSet function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...
CLSA-2025-1757427840 mpfr: Fix of CVE-2014-9474
CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpnsetstr...
XAPI UTF-8 string handling
ISSUE DESCRIPTION There are multiple issues. 1. Updates to the XAPI database sanitise input strings, but try generating the notification using the unsanitised input. This causes the database's event thread to terminate and cease further processing. 2. XAPI's UTF-8 encoder implements v3.0 of the...
CLSA-2025-1757409276 mpfr: Fix of CVE-2014-9474
CVE-2014-9474: Fix of a buffer overflow due to incorrect GMP documentation for mpnsetstr...
CVE-2025-10123
A vulnerability was determined in D-Link DIR-823X up to 250416. Affected by this vulnerability is the function sub415028 of the file /goform/setstaticleases. Executing manipulation of the argument Hostname can lead to command injection. The attack can be launched remotely. The exploit has been...