CVE-2025-71384

Dbit WIFI4 N300 1.0.0 devices allows administrators from the local Wi-Fi network to execute OS commands by leveraging a stack-based buffer overflow via the /api/addStaticDHCP comment field,...

Rocky Linux 9.6 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791294114)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791294114 advisory. - A vulnerability was identified in Artifex Ghostscript up to 10.07.0. Affected is the function type1callsubr of the file...

Cisco IOS SNMP RCE (CVE-2025-20352)

Exploits CVE-2025-20352 stack-based buffer overflow in Cisco IOS/IOS-XE SNMP subsystem. Sends crafted SNMP SET/GET packets to trigger overflow and execute shellcode or crash for confirmation. !/usr/bin/env python3 -- coding: utf-8 -- """Cisco IOS/IOS-XE SNMP stack overflow RCE CVE-2025-20352."""...

Cisco IOS SNMP CVE-2025-20352 Detection

Detects Cisco IOS/IOS-XE devices with SNMP exposed that may be vulnerable to CVE-2025-20352 stack-based buffer overflow in SNMP subsystem leading to unauthenticated RCE. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Cisco IOS/IOS-XE SNMP RCE surface CVE-2025-20352.""" from kittysploit impor...

CVE-2026-105285

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

CVE-2026-105285 Totolink A3002MU QoS Rule formIpQoS stack-based overflow

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

EUVD-2026-92383

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

CVE-2026-105285: Stack-based Buffer Overflow

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

CVE-2026-20521: Stack-based Buffer Overflow

In Video HAL, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS11375674; Issue ID: MSV-9571...

Linux Distros Unpatched Vulnerability : CVE-2026-66837

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users...

Linux Distros Unpatched Vulnerability : CVE-2026-93925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before...

SUSE CVE-2026-63292

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

CVE-2026-66837

A flaw was found in Apache Thrift. An integer overflow within the PHP bindings leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker could exploit this flaw to crash the service, leading to a Denial of Service DoS. Mitigation Mitigation...

DEBIAN-CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

AZL-106638 CVE-2026-66837 affecting package thrift 0.24.0-1

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-104611

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104610

A security vulnerability has been detected in Tenda HG7, HG9 and HG10 300001138enxpon. This impacts the function boaGetVar of the file /boaform/formLoopBack of the component Boa Web Server. Such manipulation of the argument Ethtype leads to stack-based buffer overflow. The attack can be executed...

CVE-2026-66837 Apache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string length

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91586

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66837

A flaw exists in the Apache Thrift PHP bindings (versions before 0.25.0 ) where an integer overflow allows a wire-controlled string length to improperly size a stack buffer. This leads to a stack-based buffer overflow when processing specially crafted data. A remote, unauthenticated attacker can ...