CVE-2024-20772: Stack-based Buffer Overflow

Media Encoder versions 24.2.1, 23.6.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2024-2876

Name of the Vulnerable Software and Affected Versions Tenda AC500 version 2.0.1.91307 Description A critical vulnerability was found in the function formexeCommand of the file /goform/execCommand, which is related to a stack-based buffer overflow. The manipulation of the argument cmdinput can lea...

CVE-2023-49907

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49907

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49909

Talos reports a stack-based buffer overflow in Tp-Link AC1350 (EAP225 V3) Web UI, specifically in the Radio Scheduling endpoint. The vulnerability (CVE-2023-49909) is triggered by crafted POST requests to /data/scheduler.association.json with operation not equal to read or load (commonly operatio...

CVE-2023-49907

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49911

Talos details CVE-2023-49911 in Tp-Link AC1350 (EAP225 V3) and EAP115 (v5.x) web interfaces. The flaw is a stack-based buffer overflow in the Radio Scheduling endpoint exposed via POST /data/scheduler.association.json. In the vulnerable code path, postScheAssocSsidDataJson routes requests with op...

CVE-2023-49912

CVE-2023-49912 describes a stack-based buffer overflow in the TP-Link AC1350 series (EAP225 V3) and EAP115 web interfaces, exposed through the Radio Scheduling feature. The vulnerability exists in the POST endpoint /data/scheduler.association.json, where an authenticated HTTP request with a craft...

Adobe Illustrator < 27.9.3 / 28.0 < 28.4 Multiple Vulnerabilities (APSB24-25) (macOS)

The version of Adobe Illustrator installed on the remote macOS host is prior to 27.9.3, 28.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-25 advisory. - Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that...

Adobe Illustrator < 27.9.3 / 28.0 < 28.4 Multiple Vulnerabilities (APSB24-25)

The version of Adobe Illustrator installed on the remote Windows host is prior to 27.9.3, 28.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-25 advisory. - Illustrator versions 28.3, 27.9.2 and earlier are affected by an out-of-bounds write vulnerability that...

Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) web interface Radio Scheduling stack-based buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1888 Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 web interface Radio Scheduling stack-based buffer overflow vulnerability April 9, 2024 CVE Number...

CVE-2024-29061: Stack-based Buffer Overflow

Secure Boot Security Feature Bypass Vulnerability...

PT-2024-4867

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version 1.2.0.20408 Description: A critical vulnerability was found in the function fromqossetting of the file /goform/fromqossetting. The manipulation of the argument qos leads to a stack-based buffer overflow. The attack can be...

CVE-2024-28924: Stack-based Buffer Overflow

Secure Boot Security Feature Bypass Vulnerability...

CVE-2024-28925: Stack-based Buffer Overflow

Secure Boot Security Feature Bypass Vulnerability...

CVE-2023-49906: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49910: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49911: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49912: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...

CVE-2023-49908: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the web interface Radio Scheduling functionality of Tp-Link AC1350 Wireless MU-MIMO Gigabit Access Point EAP225 V3 v5.1.0 Build 20220926. A specially crafted series of HTTP requests can lead to remote code execution. An attacker can make an...