The vulnerability of the strcpy() function in the microprogramming software for thermal imagers like Infiray IRAY-A8Z3 allows a intruder to execute arbitrary code.

The vulnerability of the strcpy function in the microprogramming software for Infiray IRAY-A8Z3 lies in the execution of the operation outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Out-of-bounds write in function vim_regsub_both

Description Out-of-bounds write in function vimregsubboth at regexp.c:1973 vim version git log commit 83497f875881973df772cc4cc593766345df6c4a HEAD - master, tag: v8.2.5105, origin/master, origin/HEAD POC root@fuzz-vm0-187:/home/fuzz/fuzz/vim/afl/src ./vim -u NONE -i NONE -n -m -X -Z -e -s -S...

CVE-2022-1669

A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary index.cgi to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Addres...

VulFi - Plugin To IDA Pro Which Can Be Used To Assist During Bug Hunting In Binaries

The VulFi Vulnerability Finder tool is a plugin to IDA Pro which can be used to assist during bug hunting in binaries. Its main objective is to provide a single view with all cross-references to the most interesting functions such as strcpy, sprintf, system, etc.. For cases where a Hexrays...

CVE-2021-26621

An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy function...

CVE-2021-26621

An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy function...

Buffer overflow

An Buffer Overflow vulnerability leading to remote code execution was discovered in MEX01. Remote attackers can use this vulnerability by using the property that the target program copies parameter values to memory through the strcpy function...

CVE-2021-26621

CVE-2021-26621 affects Netis MEX01 routers. The vulnerability is a buffer overflow caused by copying parameter values with strcpy(), enabling remote code execution. Documents from NVD/Red Hat/CVE channels describe the same issue and assign high/critical impact (ATT&CK not specified in sources). T...

Netis Systems Netis MEX01 安全漏洞

The Netis Systems Netis MEX01 is a router from the Chinese company Netis Systems. A security vulnerability exists in Netis MEX01, which is caused by a buffer overflow vulnerability in the software. The vulnerability can be exploited by an attacker via the strcpy function that copies parameter...

CVE-2021-46408

Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub422CE4. This vulnerability allows attackers to cause a Denial of Service DoS via the strcpy parameter...

CVE-2021-46408

Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub422CE4. This vulnerability allows attackers to cause a Denial of Service DoS via the strcpy parameter...

CVE-2021-46408

Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub422CE4. This vulnerability allows attackers to cause a Denial of Service DoS via the strcpy parameter...

Tenda AX12 缓冲区错误漏洞

Tenda AX12 is a dual-band Gigabit Wifi 6 wireless router from Tenda China. A security vulnerability exists in Tenda AX12 v22.03.01.21, which originates from a stack buffer overflow contained in the function sub422CE4. An attacker can exploit this vulnerability to cause a denial of service DoS via...

CVE-2021-46408

CVE-2021-46408 affects Tenda AX12 v22.03.01.21. A stack buffer overflow in the function sub_422CE4 allows attackers to trigger a Denial of Service via the strcpy parameter. Multiple connected sources (CNVD/CNNVD/NVD/CVE records) corroborate the DoS impact and the vulnerable component, but none pr...

curl: Use of Unsafe function || Strcpy

Summary: It was observed that application is using strcpy function which may cause buffer overflow attacks. Affected Code https://github.com/curl/curl Affected Lines 1. Line 195 of curl-master\tests\libtest\stubgssapi.c 2. Line 204,212,216 curl-master\tests\server\socksd.c Steps To Reproduce: Let...

PT-2022-4911 · NetGear · Netgear N300 Wireless Router

Name of the Vulnerable Software and Affected Versions: Netgear N300 wireless router wnr2000v4 version V1.0.0.70 Description: The issue is related to a buffer overflow vulnerability caused by the strcpy function in the uhttpd web server, which can lead to a stack overflow. This vulnerability can b...

CVE-2021-21903

A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to strcpy. An attacker can send a malicious packet to trigger this...

Stack overflow

A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to strcpy. An attacker can send a malicious packet to trigger this...

CVE-2021-21903

A stack-based buffer overflow vulnerability exists in the CMA checkudpcrc function of Garrett Metal Detectors’ iC Module CMA Version 5.0. A specially-crafted packet can lead to a stack-based buffer overflow during a call to strcpy. An attacker can send a malicious packet to trigger this...

Buffer Overflow

github.com/numpy/numpy is vulnerable to buffer overflow. The vulnerability exists because of the use strcpy which does not sanitize the input and its boundaries...