Unchecked Input For Loop Condition

com.liferay.portal, com.liferay.portal.impl is vulnerable to unchecked input for loop condition. The vulnerability is due to improper validation of input data in XML-RPC requests, which allows an attacker to perform a denial-of-service DoS attack by sending a crafted XML-RPC request...

GHSA-7VJM-6QGQ-3MRQ Shaman has soundness issues and is unmaintained

shaman::cryptoutil::writeu64vle and other functions mentioned above cannot garantee memory safety of getunchecked later if both length are zero. shaman is unmaintained...

The vulnerability of the formSetPortTr() function in D-Link DIR600L router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formSetPortTr function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service...

The vulnerability of the formAutoDetecWAN_wizard4() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formAutoDetecWANwizard4 function in the microprogrammed routing software of D-Link DIR600L lies in the copying of buffers without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability can allow a malicious actor ...

The vulnerability of the formSetLog() function in D-Link DIR600L router software allows a intruder to cause a service failure.

The vulnerability of the formSetLog function in D-Link DIR600L router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service failure...

The vulnerability of the formSetEasy_Wizard() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formSetEasyWizard function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause service...

EUVD-2025-37035

gnark-crypto allows unchecked memory allocation during vector deserialization...

gnark-crypto allows unchecked memory allocation during vector deserialization

The issue has been reported by @raefko from @fuzzinglabs. Excerpts from the report: A critical vulnerability exists in the gnark-crypto library's Vector.ReadFrom function that allows an attacker to trigger arbitrary memory allocation by crafting malicious input data. An attacker can cause the...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unchecked cxlfs pointer that could lead to a null pointer dereference...

PT-2025-45713

The issue has been reported by @raefko from @fuzzinglabs. Excerpts from the report: A critical vulnerability exists in the gnark-crypto library's Vector.ReadFrom function that allows an attacker to trigger arbitrary memory allocation by crafting malicious input data. An attacker can cause the...

gnark-crypto allows unchecked memory allocation during vector deserialization

The issue has been reported by @raefko from @fuzzinglabs. Excerpts from the report: A critical vulnerability exists in the gnark-crypto library's Vector.ReadFrom function that allows an attacker to trigger arbitrary memory allocation by crafting malicious input data. An attacker can cause the...

CVE-2025-12142

CVE-2025-12142 affects ABB Terra AC wallbox (versions up to 1.8.33). The issue is a classic buffer overflow (buffer copy without checking input size). According to connected sources, processing crafted input may lead to code execution or firmware behavior alteration. Remediation referenced across...

CVE-2025-9544 Doppler Forms <= 2.5.1 - Subscriber+ Limited Plugin Installation

The Doppler Forms WordPress plugin through 2.5.1 registers an AJAX action installextension without verifying user capabilities or using a nonce. As a result, any authenticated user — including those with the Subscriber role — can install and activate additional Doppler Forms WordPress plugin...

ABB Terra AC wallbox 安全漏洞

The ABB Terra AC wallbox is ABB's superior EV home charger, offering high value quality, future-proof flexibility, and advanced security and protection. A security vulnerability exists in ABB Terra AC wallbox version 1.8.33 and earlier, which originates from buffer copying without checking the...

The vulnerability of the formSetQoS() function in D-Link DIR600L router software allows a hacker to trigger a service failure.

The vulnerability of the formSetQoS function in D-Link DIR600L router software lies in the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the formLogDnsquery() function in D-Link DIR600L router software allows a hacker to induce a service failure.

The vulnerability of the formLogDnsquery function in D-Link DIR600L router microprogramming software is related to the copying of buffer data without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability can allow a malicious actor to cause servi...

The vulnerability of the formSetRoute() function in D-Link DIR600L router microprogramming software allows a intruder to cause a service failure.

The vulnerability of the formSetRoute function in D-Link DIR600L router microprogramming software lies in the copying of the buffer without checking the size of the input data during the processing of the curTime parameter. Exploiting this vulnerability could allow a malicious actor to cause...

The vulnerability of the kernel component of the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the kernel component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the setDmzCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the setDmzCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the fromSetIpBind() function in Tenda CH22 router software allows a attacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromSetIpBind function in Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain unauthorized access to...