9410 matches found
CVE-2025-60684: Stack-based Buffer Overflow
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB V9.1.0u.6619B20230130 and NR1800X V9.1.0u.6681B20230703 Router firmware within the cstecgi.cgi binary sub42F32C function. The web interface reads the "lang" parameter and constructs Help URL strings using sprintf into fixed-siz...
Linksys E1200 安全漏洞
Linksys E1200 is a router from Linksys USA. A security vulnerability exists in the Linksys E1200 E1200v2.0.11.001us.tar.gz version, which stems from a stack buffer overflow in the libshared.so library that could lead to memory corruption, denial of service, or execution of arbitrary code...
PT-2025-51495
Уязвимость функции getSaveConfig микропрограммного обеспечения роутера TOTOLink A950RG связана с переполнением буфера в стеке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...
CVE-2025-60688: Stack-based Buffer Overflow
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB V9.1.0u.6619B20230130 and NR1800X V9.1.0u.6681B20230703 Router firmware within the cstecgi.cgi binary setDefResponse function. The binary reads the "IpAddress" parameter from a web request and copies it into a fixed-size stack...
D-Link DIR-816A2 安全漏洞
D-Link DIR-816A2 is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-816A2 that stems from improper buffer sizing when the upload.cgi module handles /proc/version, which could result in a stack buffer overflow...
CVE-2025-60674: Stack-based Buffer Overflow
A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127...
D-Link DIR-878 安全漏洞
The D-Link DIR-878 is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DIR-878 that originates from improperly reading the Serial Number field in the rc binary's USB storage handling module, which could result in a stack buffer overflow...
CVE-2025-60684
A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) router firmware. The flaw is located within the cstecgi.cgi binary in the sub_42F32C function, where the web interface processes the "lang" parameter. The applicatio...
net-snmp:snmp_parse_trap_fuzzer: Stack-buffer-overflow in snmp_input
Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4889078417129472 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpparsetrapfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...
net-snmp:snmp_parse_trap_fuzzer: Stack-buffer-overflow in snmp_input
Project: git://git.code.sf.net/p/net-snmp/code https://github.com/net-snmp/net-snmp.git Detailed Report: https://oss-fuzz.com/testcase?key=4907151639511040 Project: net-snmp Fuzzing Engine: afl Fuzz Target: snmpparsetrapfuzzer Job Type: aflasannet-snmp Platform Id: linux Crash Type:...
CLSA-2025-1762544767 gstreamer1-plugins-base: Fix of CVE-2024-47538
CVE-2024-47538: fix stack-buffer overflow in vorbishandleidentificationpacket function by limiting writing beyond boundaries of position array...
The vulnerability of the sub_426EF8() function in TOTOLINK LR350 router microprogramming software allows a intruder to trigger a service failure.
The vulnerability of the sub426EF8 function in TOTOLINK LR350 router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sub_421A04() function in TOTOLINK A7000R router microprogramming software allows a intruder to trigger a service failure.
The vulnerability of sub421A04 in the microprogramming software of TOTOLINK A7000R routers is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the sub_421CF0() function in TOTOLINK A7000R router microprogramming software allows a intruder to cause a service failure.
The vulnerability of the sub421CF0 function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause a service failure...
PT-2025-45633
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...
PT-2025-45639
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...
TOTOLINK LR350 sub_4232EC function stack buffer overflow vulnerability
TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the wifiOff parameter failing to properly...
TOTOLINK LR350 http_host parameter stack buffer overflow vulnerability
TOTOLINK LR350 is a 4GLTE wireless router from China's Gion Electronics TOTOLINK that supports converting 4G signals to wired signals for home and office scenarios. The TOTOLINK LR350 suffers from a stack buffer overflow vulnerability, which stems from the failure of the httphost parameter in the...
CVE-2025-62507
Redis is an open source, in-memory database that persists on disk. In versions 8.2.0 and above, a user can run the XACKDEL command with multiple ID's and trigger a stack buffer overflow, which may potentially lead to remote code execution. This issue is fixed in version 8.2.3. To workaround this...