CVE-2025-60684

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) router firmware. The flaw is located within the cstecgi.cgi binary in the sub_42F32C function, where the web interface processes the "lang" parameter. The applicatio...

CVE-2025-60684: Stack-based Buffer Overflow

A stack buffer overflow vulnerability exists in the ToToLink LR1200GB V9.1.0u.6619B20230130 and NR1800X V9.1.0u.6681B20230703 Router firmware within the cstecgi.cgi binary sub42F32C function. The web interface reads the "lang" parameter and constructs Help URL strings using sprintf into fixed-siz...

net-snmp:snmp_parse_trap_fuzzer: Stack-buffer-overflow in snmp_input

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4889078417129472 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpparsetrapfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

net-snmp:snmp_parse_trap_fuzzer: Stack-buffer-overflow in snmp_input

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4907151639511040 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpparsetrapfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...

CLSA-2025-1762544767 gstreamer1-plugins-base: Fix of CVE-2024-47538

CVE-2024-47538: fix stack-buffer overflow in vorbishandleidentificationpacket function by limiting writing beyond boundaries of position array...

PT-2025-45639

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...

PT-2025-45633

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...

TOTOLINK A7000R Router DoS

The vulnerability of the sub421CF0 function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

TOTOLINK A7000R Router DoS

The vulnerability of sub421A04 in the microprogramming software of TOTOLINK A7000R routers is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

TOTOLINK LR350 Router DoS

The vulnerability of the sub426EF8 function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...

TOTOLINK LR350 http_host parameter stack buffer overflow vulnerability

TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the failure of the httphost parameter in the...

TOTOLINK LR350 sub_4232EC function stack buffer overflow vulnerability

TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the wifiOff parameter failing to properly...

CVE-2025-62507

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...

PT-2025-46926

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=457106694 Crash type: Stack-buffer-overflow READ 8 Crash state: snmp input snmp parse trap fuzzer.c...

CVE-2025-62507: Improper Input Validation

Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...

Redis 安全漏洞

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis version 8.2.0 and versions prior to 8.2.3, which stems from a stack buffer...

PT-2025-44989

Name of the Vulnerable Software and Affected Versions Redis versions 8.2.0 through 8.2.2 Description Redis, an open-source, in-memory database, contains a stack buffer overflow issue in the XACKDEL command when handling multiple IDs. Successful exploitation of this issue may allow a remote attack...

net-snmp:snmp_parse_trap_fuzzer: Stack-buffer-overflow in snmp_input

Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=5213381398429696 Project: net-snmp Fuzzing Engine: libFuzzer Fuzz Target: snmpparsetrapfuzzer Job Type: libfuzzerasannet-snmp Platform Id: linux Crash Type:...

TOTOLINK LR350 安全漏洞

TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the failure of the password parameter in the...

TOTOLINK LR350 安全漏洞

TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the wifiOff parameter failing to properly...