TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the formMapDelDevice function of boa. A specially crafted HTTP request can lead to arbitrary code execution; attackers can exploit this flaw by sending authenticated HTTP requests...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the static network configuration feature of boa formIpv6Setup, where the staticdns1 parameter involves a stack buffer overflow. Attackers can exploit this vulnerability through authenticated HTTP requests,...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from a stack buffer overflow in the boa formIpQos mac function. Attackers can exploit this vulnerability by sending specially crafted HTTP requests, resulting in arbitrary code execution...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the login function, which could allow attackers to execute arbitrary code...

TOTOLINK X2000R Buffer Error Vulnerability

TOTOLINK X2000R V1.0.0-B20250421.1327 version has a buffer overflow vulnerability. This vulnerability stems from an stack buffer overflow in the vpnUser parameter of the boa formFilter function. It may allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from the pppoedns2 parameter in the boa formIpv6Setup pppoe function, where a stack buffer overflow occurs. This could allow authenticated attackers to execute arbitrary code through specially crafted HTTP requests...

Advantech Adam-3600 buffer error vulnerability

The Advantech Adam-3600 versions prior to 2.8.5.0 have a buffer error vulnerability. This vulnerability stems from a stack buffer overflow, which may allow remote authenticated attackers to execute arbitrary code...

curl resource management error vulnerability

The curl version 7.56.0 to 8.22.0 contains a resource management vulnerability. This vulnerability arises from constructing deeply nested multipart MIME structures using public APIs, leading to a libcurl stack overflow during normal cleanup operations. Additionally, the recursive depth of...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formTR069Config function. An authenticated attacker can exploit this vulnerability by sending a specially crafted HTTP...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formUploadFile function. Authorized attackers can trigger this vulnerability through specially crafted HTTP requests, allowing arbitrary code to execute...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability, which stems from an stack buffer overflow in the MCLI function. This vulnerability could allow attackers to execute arbitrary code through specially crafted HTTP requests...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 version contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the dhcpdns1 parameter within the boa formIpv6Setup dhcpdns functionality. specially crafted HTTP requests can lead to arbitrary cod...

TOTOLINK X2000R buffer error vulnerability

The TOTOLINK X2000R contains a buffer error vulnerability. This vulnerability stems from a stack buffer overflow in the pppoedns1 parameter within the boa formIpv6Setup pppoe functionality, potentially allowing authenticated attackers to execute arbitrary code via specially crafted HTTP requests...

TOTOLINK X2000R Buffer Error Vulnerability

The TOTOLINK X2000R has a buffer overflow vulnerability. This vulnerability stems from a stack buffer overflow in the boa formMapDelDevice hostname function. Authorized attackers can exploit this vulnerability through specially crafted HTTP requests, resulting in arbitrary code execution...

HMS Networks PEAK-System Device Driver Setup input validation error vulnerability

Versions 5.1.2.1151 and earlier of the HMS Networks PEAK-System Device Driver, as well as PCAN Windows CAN device drivers versions 5.1.2 and earlier, contain an input validation error vulnerability. This vulnerability arises because the PCAN parser utilizes a DLC index length table controlled by...

Exploit for CVE-2024-58299

Description This pull request addresses a security vulnerabil...

EUVD-2026-104414

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-112368

The MongoDB PHP driver contains an uncontrolled recursion weakness (CWE-674) within its BSON decoding logic, specifically in the phongo_bson_visit_document/visit_array functions. An unauthenticated attacker can provide crafted binary document data to the decoder to exhaust the process stack. This...

CVE-2026-112368 Unbounded Recursion in phongo_bson_visit_document/visit_array:

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...

CVE-2026-112368

An uncontrolled recursion weakness in the BSON decoding logic of the MongoDB PHP driver may allow an unauthenticated party who can supply crafted binary document data to the decoder to exhaust the process stack. This may cause the PHP process using the driver to terminate unexpectedly, resulting ...