CVE-2026-101039: Stack-based Buffer Overflow

A vulnerability was identified in FAST FAC1900R 201908272.0.2. Affected by this issue is the function copymsgelement of the component devdiscover Service. Such manipulation leads to stack-based buffer overflow. The attack can be executed remotely. The exploit is publicly available and might be...

RHEL 9 : rrdtool (RHSA-2026:72278)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:72278 advisory. The round robin database RRD system stores and displays time-series data, such as network bandwidth, machine-room temperature, and server load...

PT-2026-108333

The brace-expansion library generates arbitrary strings containing a common prefix and suffix. Prior to 1.1.20, 2.1.6, 3.0.8, and 5.0.11, deeply nested brace groups cause expand to recurse once per nesting level at comma-member and single-set expansion sites, exhausting the native stack before...

RUSTSEC-2026-0311 Stack overflow on deeply nested LaTeX input

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

Stack overflow on deeply nested LaTeX input

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as \frac1…, braces, \sqrt…, \left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

CVE-2026-100745

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

CVE-2026-100745 Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

CVE-2026-100745

A stack-based buffer overflow vulnerability exists in the Edimax BR-6428nC (version 1.16) within the Wireless Wizard Handler component. The flaw is located in an unknown function of the /goform/formWizSurvey file, where manipulating the interface1/interface2 argument can trigger the overflow. Rem...

CVE-2026-100745 Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

EUVD-2026-87833

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

PT-2026-99488

Name of the Vulnerable Software and Affected Versions Edimax BR-6428nC version 1.16 Description A stack-based buffer overflow exists in the Wireless Wizard Handler component within the /goform/formWizSurvey endpoint. This issue occurs when the interface1 or interface2 arguments are manipulated,...

PT-2026-99700

Name of the Vulnerable Software and Affected Versions FAST FAC1900R version 20190827 2.0.2 Description A stack-based buffer overflow exists in the copy msg element function of the devdiscover Service component. This issue allows for remote execution of an attack through manipulation of the affect...

PT-2026-99698

Name of the Vulnerable Software and Affected Versions FAST FAC1200R version 5.0 20201119 1.0.2 Description A stack-based buffer overflow occurs in the parse advertisement frame function of the devdiscover Service. This issue allows a remote attacker to manipulate the service, potentially leading ...

PT-2026-107651

The parser and layout engine in affected versions of latex-rust recurse once per level of nesting with no limit. Deeply nested input, such as frac1…, braces, sqrt…, left, or superscripts nested hundreds or thousands of levels deep, exhausts the call stack. A stack overflow in Rust aborts the...

CVE-2026-100745: Stack-based Buffer Overflow

A vulnerability has been found in Edimax BR-6428nC 1.16. The impacted element is an unknown function of the file /goform/formWizSurvey of the component Wireless Wizard Handler. The manipulation of the argument interface1/interface2 leads to stack-based buffer overflow. Remote exploitation of the...

PT-2026-99699

Name of the Vulnerable Software and Affected Versions FAST FAC1200R version 5.0 20201119 1.0.2 Description A stack-based buffer overflow occurs in the MmtAtePrase Parser component via the MmtAtePrase function. This flaw allows for remote exploitation. Recommendations At the moment, there is no...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 — LongLogon crasher PoC Pre-authentication s...

DEBIAN-CVE-2026-100702

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

CVE-2026-100702

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...

CVE-2026-100702

Nodemailer before 10.0.2 fails to properly flatten deeply nested arrays in recipient fields such as to, cc, and bcc, allowing attackers to cause stack exhaustion. Attackers can supply a deeply nested JSON recipient array that triggers recursive Array.toString conversion, exhausting the call stack...