CVE-2020-36109-POC

CVE-2020-36109-POC Feb 13 2021, Altin Thartori, github.com/tin-z Vulnerability details ASUS RT-AX86U router firmware below version under 9.0.0.4386 has a buffer overflow in the blockingrequest.cgi function of the httpd module that can cause code execution when an attacker constructs malicious dat...

CVE-2025-55763

CVE-2025-55763 Buffer Overflow in the URI parser of CivetWeb 1.16 latest release as of yet. Vulnerable code The crash occurs here in src/civetweb.c during the last strcat marked. Fix See the pull request. PoC The PoC crashes the server performing an heap overflow, however it is possible to achiev...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat...

UBUNTU-CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

AZL-99717 CVE-2026-86140 affecting package libxml2 2.11.5-10

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

EUVD-2026-71833

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

CVE-2026-86140

CVE-2026-86140 affects libxml2 versions prior to 2.15.4 . The vulnerability resides in the xmlSnprintfElements function within valid.c , where a strcat call causes a stack-based buffer overflow . The CVSS 3.1 score is 8.0 (HIGH) with a local attack vector, low complexity, and no privileges or use...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

CVE-2026-86140

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

PT-2026-86301

In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow...

CVE-2026-74391

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

UBUNTU-CVE-2026-74391

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

Linux Distros Unpatched Vulnerability : CVE-2026-74391

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed...

CVE-2026-11884

389 Directory Server suffers a heap buffer overflow in schema objectclass serialization (oc_superior field) due to omitted length in size calculations during read_schema_dse() and schema_oc_to_string(). The SUP field is still written with strcat(), enabling an attacker with Directory Manager priv...

PT-2026-48432

Name of the Vulnerable Software and Affected Versions 389 Directory Server affected versions not specified Description A heap buffer overflow occurs during the serialization of objectclass definitions. The length of the oc superior SUP field is omitted from buffer size calculations within the rea...

CVE-2026-6483 Wavlink WL-WN530H4 internet.cgi snprintf os command injection

A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used...

CVE-2026-6483 Wavlink WL-WN530H4 internet.cgi snprintf os command injection

A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used...

PT-2026-33435

A vulnerability was found in Wavlink WL-WN530H4 20220721. This vulnerability affects the function strcat/snprintf of the file /cgi-bin/internet.cgi. The manipulation results in os command injection. It is possible to launch the attack remotely. The exploit has been made public and could be used...