CVE-2026-53002

The CVE-2026-53002 entry documents a vulnerability in the Linux kernel’s netfilter/conntrack code. Root cause: use of sprintf with inadequate buffer handling in mangle_content_len(), leading to a potential stack-out-of-bounds write (KASAN). The fix replaces sprintf with scnprintf and increases th...

CVE-2026-53002 netfilter: conntrack: remove sprintf usage

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for snprintf+overflow check. Increase buffer size in manglecontentlen while at it...

CVE-2026-53002

In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: remove sprintf usage Replace it with scnprintf, the buffer sizes are expected to be large enough to hold the result, no need for snprintf+overflow check. Increase buffer size in manglecontentlen while at it...

CVE-2026-12221

A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk Upload Handler. Performing a manipulation of the argument uid/startoffset results in stack-based buffer overflow. The attack needs to be...

CVE-2026-12221: Stack-based Buffer Overflow

A vulnerability was found in Yealink SIP-T46U 108.86.0.118. This impacts the function sprintf of the file /api/upgrade/upgrade of the component Firmware Chunk Upload Handler. Performing a manipulation of the argument uid/startoffset results in stack-based buffer overflow. The attack needs to be...

CVE-2026-7851

A vulnerability was identified in D-Link DI-8100 16.07.26A1. This affects the function sprintf of the file yyxz.asp. The manipulation of the argument ID leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit is publicly available and might be used...

CVE-2026-7857

A vulnerability has been found in D-Link DI-8100 16.07.26A1. This vulnerability affects the function sprintf of the file /usergroup.asp of the component CGI Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and m...

CVE-2026-7853

A weakness has been identified in D-Link DI-8100 16.07.26A1. Affected is the function sprintf of the file /autoreboot.asp of the component HTTP Handler. This manipulation of the argument enable/time causes buffer overflow. It is possible to initiate the attack remotely. The exploit has been made...

The vulnerability of the sprintf() function in the /httpddebug.asp file of the D-Link DI-7001 MINI router’s microprogramming system allows a hacker to cause a service failure or execute arbitrary commands.

The vulnerability of the sprintf function in the /httpddebug.asp file of the D-Link DI-7001 MINI router’s microprogramming system is related to the execution of operations outside the buffer in memory when processing the time parameter. Exploiting this vulnerability allows a remote attacker to...

CVE-2026-10270 D-Link DI-7001 MINI API httpd_debug.asp sprintf stack-based overflow

A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpddebug.asp of the component API. The manipulation of the argument Time results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public...

CVE-2026-10270: Stack-based Buffer Overflow

A vulnerability was detected in D-Link DI-7001 MINI up to 19.09.19A1. Impacted is the function sprintf of the file /httpddebug.asp of the component API. The manipulation of the argument Time results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public...

CVE-2026-8197

Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template renders the integration name admin-controlled through Concrete's t translation helper as a sprintf-style format. The ... wrap is built by PHP string interpolation before t runs, so th...

BillaBear is Vulnerable to SQL Injection in the EventRepository

BillaBear all versions prior to Jan 2026 contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf without proper sanitization or identifier quoting. Although...

CVE-2026-31069: Improper Neutralization of Special Elements used in an SQL Command

BillaBear all versions prior to Jan 2026 contains a SQL Injection vulnerability in the EventRepository. User-controlled input from metric filter names and aggregation properties is directly interpolated into SQL queries using sprintf without proper sanitization or identifier quoting. Although...

The vulnerability of the sprintf() function in the JHTTPD web server of D-Link’s router software DI-8100 allows a hacker to execute arbitrary code.

The vulnerability of the sprintf function in the D-Link DI-8100 router microprogramming software’s web server is related to the execution of operations outside of the buffer during the processing of the enable and time parameters. Exploiting this vulnerability allows a remote attacker to execute...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32591)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the sprintf function in the HTTP Handler component, specifically the autoreboot.asp file...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32587)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the sprintf function in the /usergroup.asp file within the CGI Handler component, which...

D-Link DI-8100 stack buffer overflow vulnerability

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a stack buffer overflow vulnerability. This vulnerability stems from the sprintf function in the file yyxz.asp, which fails to properly handle paramete...

The vulnerability of the sprintf() function in D-Link DI-8100 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the sprintf function in D-Link DI-8100 router microprogramming devices is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the sprintf() function in D-Link DI-8100 router microprogramming software allows a hacker to cause a service failure.

The vulnerability of the sprintf function in D-Link DI-8100 router microprogramming devices is related to buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...