Lucene search
+L

32 matches found

BDU FSTEC
BDU FSTEC
•added 2026/06/23 12:00 a.m.•19 views

The vulnerability of the urldecode() function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the urldecode function in the PHP programming language is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure remotely...

7.8CVSS6.5AI score0.00405EPSS
SaveExploits0References5Affected Software3
RedHat Linux
RedHat Linux
•added 2026/06/01 11:21 a.m.•40 views

PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions

A flaw was found in PHP. Some functions, including urldecode, incorrectly pass signed characters to character type ctype functions. On certain systems, this can lead to accessing memory with a negative offset. This vulnerability can be exploited by an attacker to trigger a denial of service DoS,...

7.5CVSS7AI score0.00405EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2026/06/01 3:37 a.m.•27 views

PHP: PHP: Denial of Service via improper handling of signed characters in ctype functions

A flaw was found in PHP. Some functions, including urldecode, incorrectly pass signed characters to character type ctype functions. On certain systems, this can lead to accessing memory with a negative offset. This vulnerability can be exploited by an attacker to trigger a denial of service DoS,...

7.5CVSS7AI score0.00405EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/05/15 4:13 p.m.•21 views

CVE-2026-7258

A flaw was found in PHP. Some functions, including urldecode, incorrectly pass signed characters to character type ctype functions. On certain systems, this can lead to accessing memory with a negative offset. This vulnerability can be exploited by an attacker to trigger a denial of service DoS,...

7.5CVSS7AI score0.00405EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/05/11 2:17 p.m.•18 views

SUSE CVE-2026-7258

In PHP versions 8.2. before 8.2.31, 8.3. before 8.3.31, 8.4. before 8.4.21, and 8.5. before 8.5.6, some functions, including urldecode, pass signed char to ctype functions like isxdigit. On the systems with default signed char and optimized table-lookup ctype functions - such as NetBSD - this can...

8.6CVSS7.1AI score0.00405EPSS
SaveExploits0References15
CNVD
CNVD
•added 2025/11/14 12:00 a.m.•14 views

TOTOLINK A7000R urldecode function stack buffer overflow vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability, which stems from the ssid parameter of the urldecode function failing...

7.5CVSS7.1AI score0.00371EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/11 12:11 a.m.•28 views

CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.4AI score0.00371EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/11/10 6:30 p.m.•12 views

EUVD-2025-48950

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

6.9AI score0.00371EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/10 4:15 p.m.•15 views

CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS5.9AI score0.00371EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/11/10 12:00 a.m.•16 views

TOTOLink A7000R 安全漏洞

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability, which stems from the ssid parameter of the urldecode function failing...

7.5CVSS7AI score0.00371EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/11/10 12:00 a.m.•19 views

PT-2025-46171

Name of the Vulnerable Software and Affected Versions TOTOLink A7000R version 9.1.0u.6115 B20201022 Description The TOTOLink A7000R router firmware contains a stack overflow in the ssid parameter of the urldecode function. This issue allows attackers to cause a Denial of Service DoS through a...

6.9AI score0.00371EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/11/10 12:00 a.m.•7 views

CVE-2025-63153

TOTOLink A7000R V9.1.0u.6115B20201022 was discovered to contain a stack overflow in the ssid parameter of the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.3AI score0.00371EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/11/07 12:00 a.m.•12 views

The vulnerability of the urldecode() function in TOTOLINK A7000R router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the urldecode function in TOTOLINK A7000R router microprogramming software is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure remotely...

9CVSS6.1AI score0.00413EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2025/11/05 12:00 a.m.•18 views

TOTOLINK A7000R urldecode function stack buffer overflow vulnerability

TOTOLINK A7000R is a wireless router from China's Gion Electronics TOTOLINK that supports WiFi7 technology for home or small business network environments. The TOTOLINK A7000R suffers from a stack buffer overflow vulnerability that originates from the ssid5g parameter in the urldecode function...

7.5CVSS7.2AI score0.00413EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/11/01 12:25 a.m.•27 views

CVE-2025-63461

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS7.4AI score0.00413EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/31 6:31 p.m.•17 views

EUVD-2025-37381

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

6.8AI score0.00413EPSS
SaveExploits1References2
OSV
OSV
•added 2025/10/31 5:15 p.m.•20 views

CVE-2025-63461

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS5.9AI score0.00413EPSS
SaveExploits1References1
NVD
NVD
•added 2025/10/31 5:15 p.m.•28 views

CVE-2025-63461

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.5CVSS0.00413EPSS
SaveExploits1References1
CVE
CVE
•added 2025/10/31 12:00 a.m.•42 views

CVE-2025-63461

The Totolink A7000R wireless router (version v9.1.0u.6115_B20201022 ) is vulnerable to a stack-based buffer overflow within the urldecode function. The flaw exists because the ssid5g parameter fails to properly validate the length of the input data. A remote attacker can exploit this by sending a...

7.5CVSS7.7AI score0.00413EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/10/31 12:00 a.m.•8 views

CVE-2025-63461

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

7.7AI score0.00413EPSS
SaveExploits1References1
Rows per page
Query Builder