PT-2026-102949

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow occurs in the DHCP fingerprinting daemon fingerd. An unauthenticated attacker with adjacent network access can execute arbitrary code or cause the...

PT-2026-102948

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A stack-based buffer overflow in the spamBlocker spamd service allows an authenticated attacker with administrator privileges to crash the service or potentially execute...

PT-2026-102419

Name of the Vulnerable Software and Affected Versions FAST FAC1203R version 20200116 2.0.4 Description A stack-based buffer overflow occurs in the tWlanTask function of the MmtAtePrase Parser component. This issue allows an attacker with local network access to execute a manipulation that trigger...

PT-2026-102920

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw port-forwarding configuration handler and is triggered by the ip subnet and fw ip request parameters during...

PT-2026-102803

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...

Medium: libxml2

Issue Overview: A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition DTD with enumerated attribute values. This triggers a double-free error in the SAX...

Amazon Linux 2 : freeipmi (ALAS-2026-3954)

The version of freeipmi installed on the remote host is prior to 1.5.7-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3954 advisory. FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in...

CVE-2026-7192: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the Dbit T-CPE301K 4G WiFi minirouter allows an authenticated attacker to cause a denial of service DoS and a system reboot via a manipulated HTTP POST request directed at the endpoint ‘/js/common/docmd.js’ endpoint containing an excessively long...

PT-2026-102821

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formAjaxSet using the topicurl=setting/setWiFiRepeaterConfig branch and the ApCliWEPKey field...

Amazon Linux 2023 : freeipmi, freeipmi-bmc-watchdog, freeipmi-devel (ALAS2023-2026-3134)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3134 advisory. FreeIPMI before 1.6.19 has a stack-based buffer overflow in ipmiseloemfujitsugetselentrylongtext in libfreeipmi/sel/ipmi-sel-string-fujitsu-irmc-common.c via malformed Fujitsu SEL long-text...

CVE-2026-94953

A stack-based buffer overflow vulnerability exists in the web management interface of the TOTOLINK N150RT (NTR150) router running firmware version V3.4.0-B20201030 . The flaw is reachable via the /boafrm/formAjaxSet route specifically when using the topicurl=setting/setWiFiRepeaterConfig branch a...

CVE-2026-101081

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

EUVD-2026-88345

A security flaw has been discovered in D-Link DI-8400 16.07. This vulnerability affects the function menunatmoreasp of the file menunatmore.asp of the component Web Administration Service. The manipulation of the argument opt results in stack-based buffer overflow. The attack can be launched...

CVE-2026-101081

The D-Link DI-8400 running firmware version 16.07 is vulnerable to a stack-based buffer overflow in the Web Administration Service . The flaw exists within the menu_nat_more_asp function of the menu_nat_more.asp file, where manipulating the opt argument can trigger the overflow. This vulnerabilit...

CVE-2026-101074

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

EUVD-2026-88312

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.

A flaw was found in glibc, the GNU C Library. A local attacker can exploit a stack-based buffer overflow in the dynamic loader ld.so when a setuid/setgid ATSECURE program's DTRPATH or DTRUNPATH begins with $ORIGIN followed by a null character or a slash. This vulnerability allows the attacker to...

Security update for erlang27

This update for erlang27 fixes the following issues: CVE-2026-42792: epmd permanent DoS via EMFILE on accept2 in erts bsc1272908. CVE-2026-47078: Relative path traversal in zip:unzip/zip:extract via checkdirlevel depth-counter bypass bsc1272909. CVE-2026-48855: Exposure of Sensitive Information t...