The vulnerability of the /goform/form2userconfig.cgi component in D-Link DIR-816 router software allows a hacker to execute arbitrary code.

The vulnerability of the /goform/form2userconfig.cgi component in D-Link DIR-816 router microprogramming software is caused by an overflow in the stack buffer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PHP 7.2.x < 7.2.3 Stack Buffer Overflow

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.3. It is, therefore, affected by a stack buffer overflow vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

PHP 5.6.x < 5.6.34 Stack Buffer Overflow

According to its banner, the version of PHP running on the remote web server is 5.6.x prior to 5.6.34. It is, therefore, affected by a stack buffer overflow vulnerability. Note that the scanner has not attempted to exploit this issue but has instead relied only on the application's self-reported...

PHP 7.0.x < 7.0.28 Stack Buffer Overflow

According to its banner, the version of PHP running on the remote web server is 7.0.x prior to 7.0.28. It is, therefore, affected by a stack buffer overflow vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version...

CVE-2018-17161

Affected software: FreeBSD bootpd server. Vulnerable component: bootpd in FreeBSD (BOOTP server). Root cause: insufficient validation of network-provided data in bootpd, triggering a stack buffer overflow. Affected versions: FreeBSD before 11.2-STABLE(r348229), 11.2-RELEASE-p7, 12.0-STABLE(r34222...

CVE-2018-17161: Improper Restriction of Operations within the Bounds of a Memory Buffer

In FreeBSD before 11.2-STABLEr348229, 11.2-RELEASE-p7, 12.0-STABLEr342228, and 12.0-RELEASE-p1, insufficient validation of network-provided data in bootpd may make it possible for a malicious attacker to craft a bootp packet which could cause a stack buffer overflow. It is possible that the buffe...

SUSE SLES12 Security Update : php5 (SUSE-SU-2016:2766-1)

This update for php5 fixes the following security issues : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

SUSE SLES12 Security Update : php7 (SUSE-SU-2016:2683-1)

This update for php7 fixes the following security issue : - CVE-2016-7568: A specially crafted image file could cause an application crash or potentially execute arbitrary code when the image is converted to webp bsc1001900 - CVE-2016-8670: Stack Buffer Overflow in GD dynamicGetbuf bsc1004924 -...

The vulnerability of the Omron CX-Programmer development environment arises from buffer overflows in the stack, allowing attackers to execute arbitrary code.

The vulnerability of the Omron CX-Programmer, designed for programming and configuring Omron PLCs, as well as for configuring compatibility between Omron CX-Servers within the Omron CX-One software suite, arises due to buffer overflow in the stack. Exploiting this vulnerability allows an attacker...

PT-2018-2860

Name of the Vulnerable Software and Affected Versions Гранит-Навигатор-6.18 Description The issue is caused by a stack buffer overflow in the device's embedded software. Exploitation of this issue may allow an attacker to cause a denial of service when connecting to the device using a UART adapte...

PT-2018-14756

Name of the Vulnerable Software and Affected Versions WebAccess/SCADA version 8.3.2 Description The issue is related to the lack of proper validation of user-supplied input, which may allow an attacker to cause a buffer overflow on the stack. Recommendations For WebAccess/SCADA version 8.3.2,...

PT-2018-3312

Name of the Vulnerable Software and Affected Versions FreeBSD versions prior to 11.2-STABLEr348229 FreeBSD versions prior to 11.2-RELEASE-p7 FreeBSD versions prior to 12.0-STABLEr342228 FreeBSD versions prior to 12.0-RELEASE-p1 Description The issue is related to insufficient validation of...

SRC-2019-0029 : Foxit Reader PDF Printer proxyDoAction opcode 0x100000 Stack Buffer Overflow Elevation of Privilege Vulnerability

Vulnerability Details: This vulnerability allows local attackers to escalate privileges on vulnerable installations of Foxit Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

SRC-2019-0030 : Foxit Reader PDF Printer proxyGetAppEdition Stack Buffer Overflow Elevation of Privilege Vulnerability

Vulnerability Details: This vulnerability allows local attackers to escalate privileges on vulnerable installations of Foxit Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists withi...

harfbuzz/hb-shape-fuzzer: Stack-buffer-overflow in hb_array_t<char const>::cmp

Project: https://github.com/harfbuzz/harfbuzz.git Detailed report: https://oss-fuzz.com/testcase?key=5642666339991552 Project: harfbuzz Fuzzer: libFuzzerharfbuzzhb-shape-fuzzer Fuzz target binary: hb-shape-fuzzer Job Type: libfuzzerasanharfbuzz Platform Id: linux Crash Type: Stack-buffer-overflow...

Red Hat librelp Stack Buffer Overflow (CVE-2018-1000140)

A stack based buffer overflow exists in Red Hat librelp. This vulnerability is due to incorrect sanitisation of x509 certificates from a peer. Successful exploitation may result in remote code execution...

WS-2018-0667

Harfbuzz in versions 1.7.0 to 2.2.0 is vulnerable to Crash in Stack-buffer-overflow in hbbsearchr, related to src/hb-ot-post-table.hh...

Advantech WebAccess/SCADA

1. EXECUTIVE SUMMARY CVSS v3 7.3 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Advantech Equipment: WebAccess/SCADA Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a stack buffer overflow condition. 3...

GNU inetutils < 1.9.4 - 'telnet.c' Multiple Overflows (PoC)

GNU inetutils = 1.9.4 telnet.c multiple overflows ================================================== GNU inetutils is vulnerable to a stack overflow vulnerability in the client-side environment variable handling which can be exploited to escape restricted shells on embedded devices. Most modern...

PT-2018-15029

Name of the Vulnerable Software and Affected Versions Antiy-AVL ATool security management version 1.0.0.22 Description The issue is caused by a failure to properly validate the length of user-supplied data, resulting in a kernel stack buffer overflow. This occurs within the processing of IOCTL...