39820 matches found
Tenda AX-1806 Sub Function DoS
The vulnerability of the sub60CFC function in the microprogramming software of the Tenda AX-1806 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow a malicious actor to cause service failure...
Tenda AX-1806 Router Form Set Wifi Mac Filter XSS
The vulnerability of the formSetWifiMacFilterCfg function in the Tenda AX-1806 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure...
Suricata Buffer Overflow DoS
The vulnerability of the Suricata intrusion detection and prevention system is related to the overflowing buffer in the stack. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure...
SUSE SLES15 Security Update : openssl-3 (SUSE-SU-2026:0310-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:0310-1 advisory. - CVE-2025-15467: Stack buffer overflow in CMS AuthEnvelopedData parsing bsc1256830. - CVE-2025-68160: Heap out-of-bounds write in...
📄 OpenSSL 3.x ASN.1 AES‑GCM Nonce Stack Corruption
This Metasploit auxiliary module generates a specially crafted CMS file encoded in DER format to test a stack-based buffer overflow vulnerability in OpenSSL's ASN.1 parser related to improper handling of oversized AES-GCM nonce IV values within AES-GCM-Parameters as defined in RFC 5084. The...
CVE-2025-63658
The Monkey Server (an open-source HTTP server developed by Monkey I/O) is vulnerable to a stack overflow in the mk_http_index_lookup function located in mk_server/mk_http.c. This flaw exists in monkey commit f37e984 . An unauthenticated attacker can exploit this vulnerability by sending a crafted...
PT-2026-5344
A stack overflow in the mk http index lookup function mk server/mk http.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
EUVD-2025-206521
A stack overflow in the mkhttpindexlookup function mkserver/mkhttp.c of monkey commit f37e984 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request to the server...
Monkey Server security vulnerabilities
Monkey Server is an open-source HTTP server developed by Monkey I/O. There is a security vulnerability in Monkey Server, which stems from a stack overflow in the mkhttpindexlookup function. This vulnerability could lead to denial-of-service attacks...
Tenda AX3 formSetIptv Heap Buffer Overflow DoS
The vulnerability of the formSetIptv function in the Tenda AX3 router’s microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause service interruptions...
Qualcomm Embedded Software Buffer Overflow Information Disclosure
The vulnerability of microprogramming software in embedded chips from Qualcomm arises due to overflow in the buffer on the stack. Exploiting this vulnerability can allow an attacker to disclose protected information during the processing of packets with invalid header lengths based on the EAVB BE...
Tenda AX-1806 Sub Process Failure
The vulnerability of the sub72290 function in the microprogramming software of the Tenda AX-1806 router is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-55095
The function uxhostclassstoragemediamount is responsible for mounting partitions on a USB mass storage device. When it encounters an extended partition entry in the partition table, it recursively calls itself to mount the next logical partition. This recursion occurs in...
CVE-2020-36971
Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter. Attackers can craft a malicious payload and paste it into the 'License Code' field to execute arbitrary code on the system...
CVE-2020-36971 Nidesoft 3GP Video Converter 2.6.18 - Local Stack Buffer Overflow
Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter. Attackers can craft a malicious payload and paste it into the 'License Code' field to execute arbitrary code on the system...
CVE-2020-36971 Nidesoft 3GP Video Converter 2.6.18 - Local Stack Buffer Overflow
Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter. Attackers can craft a malicious payload and paste it into the 'License Code' field to execute arbitrary code on the system...
EUVD-2020-30878
Nidesoft 3GP Video Converter 2.6.18 contains a local stack buffer overflow vulnerability in the license registration parameter. Attackers can craft a malicious payload and paste it into the 'License Code' field to execute arbitrary code on the system...
CVE-2020-36971
CVE-2020-36971 affects Nidesoft 3GP Video Converter 2.6.18. The vulnerability is a local stack buffer overflow in the license registration parameter; an attacker can craft a malicious payload in the License Code field to execute arbitrary code on the host. Provided sources consistently describe t...
openssl: OpenSSL: Arbitrary code execution or denial of service through crafted PKCS#12 file
A flaw was found in OpenSSL. When an application processes a maliciously crafted PKCS12 file, an attacker can exploit a stack buffer overflow or a NULL pointer dereference. This can lead to a denial of service DoS by crashing the application, and in some cases, may enable arbitrary code execution...
