1197 matches found
EUVD-2025-27216
Malicious code in bioql PyPI...
EUVD-2025-24163
Malicious code in bioql PyPI...
Tenda AC20 strcpy Buffer Overflow DoS
The vulnerability of the HTTP POST Request Handler component in the strcpy function of the microprogramming system used in Tenda AC20 routers is related to the escape of operations beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause service failures o...
Tenda AC21 strcpy() Code Execution
The vulnerability of the strcpy function in the microprogramming software for Tenda AC21 lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted POST request...
CVE-2025-10815
The CVE-2025-10815 issue affects Tenda AC20 firmware up to 16.03.08.12. The vulnerability exists in the HTTP POST Request Handler file /goform/SetPptpServerCfg where unsafely uses strcpy on the startIp argument, causing a buffer overflow. This can be triggered remotely, with publicly available ex...
Stack-based Buffer Overflow
Overview codechecker is an analyzer tooling, defect database and viewer extension Affected versions of this package are vulnerable to Stack-based Buffer Overflow via the strcpy function in the internal ldlogger library. An attacker can execute arbitrary code or cause a crash by supplying crafted...
CodeChecker has a buffer overflow in the log command
Summary CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command. Details Unsafe usage of strcpy function in the internal ldlogger library allows attackers to trigger a buffer overflow by supplying...
GHSA-5XF2-F6CH-6P8R CodeChecker has a buffer overflow in the log command
Summary CodeChecker versions up to 6.26.1 contain a buffer overflow vulnerability in the internal ldlogger library, which is executed by the CodeChecker log command. Details Unsafe usage of strcpy function in the internal ldlogger library allows attackers to trigger a buffer overflow by supplying...
PT-2025-39096
Name of the Vulnerable Software and Affected Versions CodeChecker versions through 6.26.1 Description CodeChecker versions up to 6.26.1 contain a buffer overflow in the internal ldlogger library, triggered when executing the CodeChecker log command. The issue stems from the unsafe use of the strc...
CVE-2025-10815: Buffer Copy without Checking Size of Input
A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. The attack can be launched remotely. T...
D-Link DCS-935L strcpy Heap Buffer Overflow DoS
The vulnerability of the strcpy function in D-Link DCS-935L wireless HD cameras’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted POST...
curl: Multiple Unsafe strcpy() Function Calls Leading to Potential Buffer Overflow Vulnerabilities in cURL 8.16.1-DEV
Summary: During a comprehensive security audit of the cURL codebase, multiple instances of unsafe strcpy function usage were identified in critical code paths. These implementations violate secure coding practices and represent latent security risks that could lead to buffer overflow...
Tenda AC20 strcpy Buffer Overflow DoS
The vulnerability of the strcpy function in the microprogrammed routing software Tenda TX3 is related to the operation that goes beyond the buffer boundaries in memory when processing the Time parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
CVE-2025-10120
A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...
Linux Distros Unpatched Vulnerability : CVE-2024-26339
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - swftools v0.9.2 was discovered to contain a strcpy parameter overlap via /home/swftools/src/swfc+0x48318a. CVE-2024-26339 Note that Nessus relies on the presenc...
CVE-2025-10120 Tenda AC20 GetParentControlInfo strcpy buffer overflow
A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...
CVE-2025-10120 Tenda AC20 GetParentControlInfo strcpy buffer overflow
A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...
CVE-2025-10120
The CVE-2025-10120 entry affects Tenda AC20 before 16.03.08.12. The vulnerability is a buffer overflow in the strcpy usage of /goform/GetParentControlInfo when processing the mac parameter. It can be triggered remotely, and public PoCs/exploits exist. Impact is consistent with high-severity, incl...
CVE-2025-10120: Buffer Copy without Checking Size of Input
A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...
