Tenda FH1202 Buffer Overflow Vulnerability

The Tenda FH1202 is a wireless router manufactured by Tenda. A buffer overflow vulnerability exists in the Tenda FH1202. The vulnerability stems from improper handling of the fromVirtualSer function in the /goform/VirtualSer file. An attacker can exploit this vulnerability to remotely execute...

EulerOS 2.0 SP11 : libxkbfile (EulerOS-SA-2025-1667)

According to the versions of the libxkbfile package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A buffer overflow flaw was found in X.Org and Xwayland. The code in XkbVModMaskText allocates a fixed- sized buffer on the stack and copies the...

EulerOS 2.0 SP13 : glibc (EulerOS-SA-2025-1615)

According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message stri...

Tenda AC18 /goform/SetSysAutoRebbotCfg Buffer Overflow Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from a misuse of the parameter rebootTime in the file /goform/SetSysAutoRebbotCfg, which can be exploited by an attacker to submit a special request and execute...

Tenda AC15 /goform/SetRemoteWebCfg File Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. Tenda AC15 suffers from a buffer overflow vulnerability, which originates from the parameter remoteIp in the file /goform/SetRemoteWebCfg that fails to correctly validate the length and size of the input data, which can be...

CVE-2025-5875 TP-LINK Technologies TL-IPC544EP-W4 main sub_69064 buffer overflow

A vulnerability classified as critical has been found in TP-LINK Technologies TL-IPC544EP-W4 1.0.9 Build 240428 Rel 69493n. Affected is the function sub69064 of the file /bin/main. The manipulation of the argument text leads to buffer overflow. It is possible to launch the attack remotely. The...

CVE-2025-5852 Tenda AC6 setPptpUserList formSetPPTPUserList buffer overflow

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...

PT-2025-25600 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical issue affects the HTTP POST Request Handler component due to a buffer overflow when processing the file /boafrm/formSysLog. The manipulation of the submit-url argument lead...

CVE-2025-5792

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This issue affects some unknown processing of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer...

CVE-2025-5787

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWsc of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow...

Tenda AC6 Buffer Overflow Vulnerability

The Tenda AC6 is a wireless router from the Chinese company Tenda. The Tenda AC6 suffers from a buffer overflow vulnerability that originates from the parameter time in the setSmartPowerManagement function failing to properly validate the length of the input data, which can be exploited by an...

PT-2025-24385 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.19 multi Description: A critical vulnerability was found in the Tenda AC15 router, affecting the formsetschedled function of the file /goform/SetLEDCf in the HTTP POST Request Handler component. The manipulation of...

CVE-2025-5672 TOTOLINK N302R Plus HTTP POST Request formFilter buffer overflow

A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument url leads to buffer...

CVE-2025-5636 PCMan FTP Server SET Command buffer overflow

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SET Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the publ...

PT-2025-24055 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue affects the unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-5550

Affected software: FreeFloat FTP Server 1.0. The issue is a buffer overflow in the PBSZ Command Handler that can be exploited remotely. Multiple sources confirm a critical impact with remote attack feasibility and publicly disclosed exploits. Remediation is present in at least one connected docum...

CVE-2025-5548

CVE-2025-5548 affects FreeFloat FTP Server 1.0; the NOOP Command Handler is vulnerable to a remote buffer overflow due to improper input validation. The vulnerability can be triggered over the network and an exploit has been disclosed publicly. Some sources recommend disabling the NOOP handler un...

K000151645: SQLite vulnerability CVE-2025-3277

Security Advisory Description An integer overflow can be triggered in SQLite’s concatws function. The resulting, truncated integer is then used to allocate a buffer. When SQLite then writes the resulting string to the buffer, it uses the original, untruncated size and thus a wild Heap Buffer...

CVE-2025-5408 WAVLINK WL-WN576K1 HTTP POST Request login.cgi sys_login buffer overflow

A vulnerability was found in WAVLINK QUANTUM D2G, QUANTUM D3G, WL-WN530G3A, WL-WN530HG3, WL-WN532A3 and WL-WN576K1 up to V1410240222 and classified as critical. Affected by this issue is the function syslogin of the file /cgi-bin/login.cgi of the component HTTP POST Request Handler. The...

PT-2025-23181 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5gc version 4.0.0 Description: The issue is a buffer overflow vulnerability that allows a remote attacker to cause a denial of service. This is achieved via the AMF, NGAP, security.go, handler generated.go, handleInitialUEMessageMain,...