38105 matches found
CVE-2025-41730
An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...
CVE-2025-41732 Stack-based buffer overflow via unsafe sscanf in check_cookie()
An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkcookie function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...
CVE-2025-41730 Stack-based buffer overflow via unsafe sscanf in check_account()
An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...
CVE-2025-41730
CVE-2025-41730 is an unauthenticated remote exploit reported for WAGO Industrial-Managed-Switches and related Red Hat/NVD variants. The root cause is unsafe uses of sscanf in the check_account() function, which can write data into fixed-size stack buffers, resulting in a stack-based overflow and ...
CVE-2025-41730 Stack-based buffer overflow via unsafe sscanf in check_account()
An unauthenticated remote attacker can abuse unsafe sscanf calls within the checkaccount function to write arbitrary data into fixed-size stack buffers which leads to full device compromise...
The vulnerability of the setSysAdm() function (/goform/setSysAdm) in the microprogramming software for Linksys routers RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code.
The vulnerability of the setSysAdm function /goform/setSysAdm in the microprogramming software for Linksys routers RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotel...
The vulnerability of the RP_checkCredentialsByBBS() function (/goform/RP_checkCredentialsByBBS) in the networking software for Linksys routers RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code.
The vulnerability of the RPcheckCredentialsByBBS function /goform/RPcheckCredentialsByBBS in the networking software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrar...
Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Fuji Electric Monitouch V-SFT V7 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fuji Electric Monitouch V-SFT. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
The vulnerability of the urlFilterManageRule() function (/goform/urlFilterManageRule) in the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code.
The vulnerability of the urlFilterManageRule function /goform/urlFilterManageRule in the microprogramming software for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to...
PT-2025-50509
Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality,...
(Pwn2Own) oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability
This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability. The specific flaw exists within the parsing of responses from AT+CUSD...
The vulnerability of the langSwitchByBBS() function in the software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 routers allows a hacker to execute arbitrary code.
The vulnerability of the langSwitchByBBS function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...
libwebsockets: Stack-based Buffer Overflow in libwebsockets
A stack based buffer overflow flaw has been discovered in libwebsockets. The vulnerability allows an attacker that can inspect DNS requests made by the victim e.g. being in the same wireless network to forge a DNS response packet that overflows the stack and may lead to arbitrary code execution...
libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...
libexpat: expat: Improper Restriction of XML Entity Expansion Depth in libexpat
A stack overflow vulnerability exists in the libexpat library due to the way it handles recursive entity expansion in XML documents. When parsing an XML document with deeply nested entity references, libexpat can be forced to recurse indefinitely, exhausting the stack space and causing a crash...
SUSE CVE-2025-13654
A stack buffer overflow vulnerability exists in the bufferget function of duc, a disk management tool, where a condition can evaluate to true due to underflow, allowing an out-of-bounds read...
CVE-2025-65804
Tenda AX3 v16.03.12.11 contains a stack overflow in formSetIptv via the iptvType parameter, which can cause memory corruption and enable remote code execution RCE...
Unity Linux 20.1070e Security Update: ncurses (UTSA-2025-991104)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-991104 advisory. A vulnerability has been found in GNU ncurses up to 6.5-20250322 and classified as problematic. This vulnerability affects the function postprocesstermcap of the fil...
