D-Link DAP-1320 DoS

The vulnerability of the setwsaction function in the microprogramming software of the D-Link DAP-1320 wireless signal amplifier is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

LB-LINK AC1900 command injection vulnerability

LB-LINK AC1900 is a wireless router from China Bilink LB-LINK. A command injection vulnerability exists in the LB-LINK AC1900 version 1.0.2, which originates from the parameter routewd in the file /goform/setmanpwd, which can lead to the injection of operating system commands...

PT-2025-13218

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the uprobes feature. The issue occurs when the shared zeropage is not properly rejected in the uprobe write opcode...

PT-2025-7696

Name of the Vulnerable Software and Affected Versions LB-LINK AC1900 Router version 1.0.2 Description A critical issue was found in the function websGetVar of the file /goform/set manpwd. The manipulation of the argument routepwd leads to os command injection. It is possible to launch the attack...

PT-2025-7674

Name of the Vulnerable Software and Affected Versions LB-LINK AC1900 Router version 1.0.2 Description The issue concerns an os command injection vulnerability. It is related to the /goform/set cmd endpoint and the websGetVar variable. Recommendations For LB-LINK AC1900 Router version 1.0.2,...

PT-2025-7680 · Netis · Netis Wf2780

Name of the Vulnerable Software and Affected Versions: Netis WF2780 version 2.1.41925 Description: The issue concerns a cross-site scripting XSS problem in the 2.4G Menu SSID of the Netis WF2780 wireless device. Recommendations: For version 2.1.41925, update the firmware to a version that address...

PT-2025-7675

Name of the Vulnerable Software and Affected Versions LB-LINK AC1900 Router version 1.0.2 Description The issue concerns an os command injection vulnerability, specifically affecting the /goform/set blacklist endpoint, where the mac and enable variables are involved. Recommendations For LB-LINK...

AZL-76853 CVE-2025-0838 affecting package abseil-cpp for versions less than 20240116.0-3

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

AZL-76815 CVE-2025-0838 affecting package abseil-cpp for versions less than 20220623.0-2

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

UBUNTU-CVE-2025-0838

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

CVE-2025-0838

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

CVE-2025-0838: Integer Overflow or Wraparound

There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve, and rehash methods of absl::flat,nodehashset,map did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer...

PT-2025-25836

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue concerns a vulnerability in the Linux kernel related to the use of IOMMU Input-Output Memory Management Unit translation for MSI Message Signaled Interrupts message addresses...

Abseil security vulnerability

Abseil is an Abseil generic library C++ open-sourced by Abseil. Abseil has a security vulnerability that stems from a buffer overflow problem caused by the size constructor, reserve and rehash methods of absl::flat,nodehashset,map not imposing an upper limit on its size parameter...

PT-2025-7522 · D Link · D-Link Dap-1320

Name of the Vulnerable Software and Affected Versions: D-Link DAP-1320 version 1.00 Description: A critical vulnerability was found in the function set ws action of the file /dws/api/. The manipulation leads to a heap-based buffer overflow. The attack can be launched remotely. This issue only...

CVE-2025-25663

A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow...

CVE-2025-27091

OpenH264 decoding vulnerability (CVE-2025-27091) affects OpenH264 2.5.0 and earlier in both SVC and AVC modes. A race condition between SPS memory allocation and subsequent non-IDR NAL memory usage can enable a remote, unauthenticated attacker to trigger a heap overflow by delivering a crafted bi...

PT-2025-7562 · Tenda · Tenda Ac8V4

Name of the Vulnerable Software and Affected Versions: Tenda AC8V4 version V16.03.34.06 Description: A vulnerability was found in the function SUB 0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk crypto leads to a stack-based buffer overflow. Recommendations: For...

PT-2025-18422

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc7 Description A deadlock vulnerability has been identified in the Linux kernel, specifically in the jfs file system. The issue arises when the ioctl$LOOP SET STATUS64 function is called with an offset...

Tenda O4 security vulnerabilities

Tenda O4 is a router product from Tenda. The Tenda O4 /goform/setMacFilterList handles a buffer overflow vulnerability in the SafeSetMacFilter parameter, which can be exploited by a remote attacker to submit a special request that can crash the application and execute arbitrary code in the...