CVE-2021-31758

Affected product: Tenda AC11 routers. Vulnerability: stack buffer overflow in /goform/setportList that allows arbitrary code execution via a crafted POST request. Impact: high likelihood of remote code execution on devices running firmware up to 02.03.01.104_CN or earlier. Notes: no remediation d...

CVE-2021-31756

CVE-2021-31756 affects Tenda AC11 devices running firmware up to 02.03.01.104_CN. A stack buffer overflow in the /gofrom/setwanType handler allows an attacker to execute arbitrary code via a crafted POST request, caused by copying a controlled input vector onto a stack variable. Public sources in...

Epic Games Rocket League 1.95 - Stack Buffer Overrun Vulnerability

Exploit Title: Epic Games Rocket League 1.95 - Stack Buffer Overrun Exploit Author: LiquidWorm Vendor Homepage: https://www.epicgames.com https://www.rocketleague.com Epic Games Rocket League 1.95 AK::MemoryMgr::GetPoolName Stack Buffer Overrun Vendor: Epic Games Inc. | Psyonix, LLC Product web...

Epic Games Rocket League 1.95 - Stack Buffer Overrun

Exploit Title: Epic Games Rocket League 1.95 - Stack Buffer Overrun Date: 25.04.2021 Exploit Author: LiquidWorm Vendor Homepage: https://www.epicgames.com https://www.rocketleague.com Epic Games Rocket League 1.95 AK::MemoryMgr::GetPoolName Stack Buffer Overrun Vendor: Epic Games Inc. | Psyonix,...

PT-2021-19491

Name of the Vulnerable Software and Affected Versions Tenda AC11 versions through 02.03.01.104 CN Description A stack buffer overflow issue allows attackers to execute arbitrary code on the system via a crafted post request to the "goform/setVLAN" API endpoint. Recommendations For versions throug...

PT-2021-19490

Name of the Vulnerable Software and Affected Versions Tenda AC11 devices with firmware through 02.03.01.104 CN Description A stack buffer overflow issue allows attackers to execute arbitrary code on the system via a crafted post request to the "gofrom/setwanType" API endpoint. This occurs when an...

PT-2021-19492

Name of the Vulnerable Software and Affected Versions Tenda AC11 versions through 02.03.01.104 CN Description A stack buffer overflow issue allows attackers to execute arbitrary code on the system via a crafted post request to the "goform/setportList" API endpoint. Recommendations For versions...

CVE-2021-31755: Out-of-bounds Write

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request...

CVE-2021-31757: Out-of-bounds Write

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request...

CVE-2021-31758: Out-of-bounds Write

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request...

CVE-2021-31756: Out-of-bounds Write

An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get...

CVE-2020-28198

The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...

Stack overflow

The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...

CVE-2020-28198

The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...

CVE-2020-28198

Summary: Multiple sources describe a stack buffer overflow in the IBM Tivoli Storage Manager components that expose the vulnerable behavior via the interactive use of the id parameter in dsmadmc.exe (Version 5 Release 2, and related IBM TSM/Operations Center variants). The flaw is triggered by an...

CVE-2020-28198

The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 Command Line Administrative Interface, dsmadmc.exe is vulnerable to an exploitable stack buffer overflow. Note: the vulnerability can be exploited when it is used in "interactive" mode while, cause of a max number characters...

fluent-bit:flb-it-fuzz-record_ac_fuzzer_OSSFUZZ: Stack-buffer-overflow in flb_sds_cat

Project: https://github.com/fluent/fluent-bit.git Detailed Report: https://oss-fuzz.com/testcase?key=6311769406570496 Project: fluent-bit Fuzzing Engine: libFuzzer Fuzz Target: flb-it-fuzz-recordacfuzzerOSSFUZZ Job Type: libfuzzerasanfluent-bit Platform Id: linux Crash Type: Stack-buffer-overflow...

CVE-2021-31616

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...

CVE-2021-31616

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...

CVE-2021-31616

Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereumextractThorchainSwapData in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is...