CVE-2025-1853

The CVE-2025-1853 entry concerns Tenda AC8 firmware 16.03.34.06. Affected component: Parameter Handler, function sub_49E098 in /goform/SetIpMacBind. Root cause: manipulation of the argument list causes a stack-based buffer overflow. Impact: remote attacker may exploit to take control of the devic...

CVE-2025-1851

A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack...

CVE-2025-1851

The CVE-2025-1851 vulnerability affects Tenda AC7 up to 15.03.06.44 in the /goform/SetFirewallCfg formSetFirewallCfg function. The firewallEn parameter length handling leads to a stack-based buffer overflow, enabling remote code execution. Affected component: formSetFirewallCfg in /goform/SetFire...

Linux Distros Unpatched Vulnerability : CVE-2010-2948

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the bgprouterefreshreceive function in bgppacket.c in bgpd in Quagga before 0.99.17 allows remote authenticated users to cause a...

Linux Distros Unpatched Vulnerability : CVE-2011-2912

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Stack-based buffer overflow in the CSoundFile::ReadS3M function in src/loads3m.cpp in libmodplug before 0.8.8.4 allows remote attackers to cause a denial of...

CVE-2025-1853: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated...

PT-2025-9518

Name of the Vulnerable Software and Affected Versions D-Link DAP-1562 version 1.10 Description A critical issue has been found in the function http request parse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to a stack-based buffer overflow. The attack...

CentOS 9 : libxml2-2.9.13-9.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the libxml2-2.9.13-9.el9 build changelog. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD...

CVE-2025-1876: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in D-Link DAP-1562 1.10. Affected by this issue is the function httprequestparse of the component HTTP Header Handler. The manipulation of the argument Authorization leads to stack-based buffer overflow. The attack may be launched...

CVE-2025-1851: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, was found in Tenda AC7 up to 15.03.06.44. This affects the function formSetFirewallCfg of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. It is possible to initiate the attack...

CVE-2025-1814

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be launched remotel...

PT-2025-9255

Name of the Vulnerable Software and Affected Versions Tenda AC8 version 16.03.34.06 Description A critical issue affects the function sub 49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to a stack-based buffer overflow. The...

CVE-2025-1814: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapskcrypto leads to stack-based buffer overflow. The attack may be launched remotel...

Security Bulletin: ThoughtWorks XStream CVE-2024-47072 security vulnerability in FileNet Content Manager (FNCM) Content Search Services (CSS)

Summary ThoughtWorks XStream CVE-2024-47072 security vulnerability in FileNet Content Manager FNCM Content Search Services CSS Vulnerability Details CVEID:CVE-2024-47072 DESCRIPTION: XStream is vulnerable to a denial of service, caused by a stack-based buffer overflow in BinaryStreamDriver. By...

CVE-2024-10918 Stack-based Buffer Overflow in libmodbus library

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length...

CVE-2024-10918

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length...

CVE-2024-10918: Stack-based Buffer Overflow

Stack-based Buffer Overflow vulnerability in libmodbus v3.1.10 allows to overflow the buffer allocated for the Modbus response if the function tries to reply to a Modbus request with an unexpected length...

CVE-2024-51138: Stack-based Buffer Overflow

Vigor165/166 4.2.7 and earlier; Vigor2620/LTE200 3.9.8.9 and earlier; Vigor2860/2925 3.9.8 and earlier; Vigor2862/2926 3.9.9.5 and earlier; Vigor2133/2762/2832 3.9.9 and earlier; Vigor2135/2765/2766 4.4.5. and earlier; Vigor2865/2866/2927 4.4.5.3 and earlier; Vigor2962 4.3.2.8 and earlier;...

CVE-2024-53427: Access of Resource Using Incompatible Type

decNumberCopy in decNumber.c in jq through 1.7.1 does not properly consider that NaN is interpreted as numeric, which has a resultant stack-based buffer overflow and out-of-bounds write, as demonstrated by use of --slurp with subtraction, such as a filter of .-. when the input has a certain form ...

PT-2025-9185

Name of the Vulnerable Software and Affected Versions Tenda AC6 version 15.03.05.16 Description A critical issue has been found in Tenda AC6, affecting some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the wpapsk crypto argument leads to a stack-based buffer overflo...