EUVD-2017-10098

Malware in sbrugna...

EUVD-2020-7467

Malware in sbrugna...

PT-2025-40979

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18 Description A flaw exists in Tenda AC15 version 15.03.05.18 that allows remote attackers to trigger a stack-based buffer overflow. The issue is related to the manipulation of the newVersion argument within the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the rcuirqenterchecktick function being probed by kprobe, which could lead to a stack overflow...

Tenda AC15 安全漏洞

Tenda AC15 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in October 2015, which supports 802.11ac protocol and is mainly designed for home network environment. Tenda AC15 has a stack buffer overflow vulnerability, which originates from the parameter newVersion i...

Unity Linux 20.1070e Security Update: yasm (UTSA-2025-680595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680595 advisory. yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via the component yasm/yasm+0x43b466 in vsprintf. Note: This has been disputed by third parties who...

CVE-2023-53655: Uncontrolled Recursion

In the Linux kernel, the following vulnerability has been resolved: rcu: Avoid stack overflow due to rcuirqenterchecktick being kprobe-ed Registering a kprobe on rcuirqenterchecktick can cause kernel stack overflow as shown below. This issue can be reproduced by enabling CONFIGNOHZFULL and bootin...

Unity Linux 20.1070a Security Update: libxml2 (UTSA-2025-986120)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986120 advisory. A flaw was found in libxml2's xmlBuildQName function, where integer overflows in buffer size calculations can lead to a stack-based buffer overflow. This issue can...

PT-2025-41000

Name of the Vulnerable Software and Affected Versions Planet WGR-500 version 1.3411b190912 Description Multiple stack-based buffer overflow issues exist in the formPingCmd functionality. An attacker can send a series of crafted HTTP requests to trigger these issues. The buffer overflow is related...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: icu (UTSA-2025-984781)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984781 advisory. A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflowed at the SRBRoot::addTag...

Unity Linux 20.1070e Security Update: libtiff (UTSA-2025-680617)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680617 advisory. A stack buffer overflow flaw was found in Libtiffs' tiffcp.c in main function. This flaw allows an attacker to pass a crafted TIFF file to the tiffcp tool, triggerin...

PT-2025-40977

Name of the Vulnerable Software and Affected Versions Tenda AC15 version 15.03.05.18 Description A buffer overflow can occur due to the manipulation of the ddnsEn argument within a POST request to the /goform/SetDDNSCfg file. This impacts an unknown function of the POST Parameter Handler componen...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414505)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414505 advisory. A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain...

Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities

Talos Vulnerability Report TALOS-2025-2226 Planet WGR-500 formPingCmd stack-based buffer overflow vulnerabilities October 7, 2025 CVE Number CVE-2025-54401,CVE-2025-54400,CVE-2025-54399,CVE-2025-54402 SUMMARY Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd...

Unity Linux 20.1070e Security Update: opensc (UTSA-2025-680621)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680621 advisory. Stack buffer overflow issues were found in Opensc before version 0.22.0 in various places that could potentially crash programs using the library. Tenable has...

Unity Linux 20.1070e Security Update: transfig (UTSA-2025-984799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-984799 advisory. In xfig diagramming tool, a stack-overflowwhile running fig2dev allows memory corruption via local input manipulation at the bezierspline function. Tenable has...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986595)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986595 advisory. In the Linux kernel, the following vulnerability has been resolved: net/iucv: Avoid explicit cpumask var allocation on stack For CONFIGCPUMASKOFFSTACK=y kernel,...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: vim (UTSA-2025-986171)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986171 advisory. Stack-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.0598. Tenable has extracted the preceding description block directly from the Unity Linux...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986695)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986695 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: mlxbf: prevent stack overflow in mlxbfi2csmbusstarttransaction memcpy is called in a loop...

Unity Linux 20.1070e Security Update: djvulibre (UTSA-2025-680663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680663 advisory. A flaw was found in djvulibre-3.5.28 and earlier. A Stack overflow in function DJVU::DjVuDocument::getdjvufile via crafted djvu file may lead to application crash an...