CVE-2025-4150

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the function sub54340. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure but...

Debian dsa-5915 : gir1.2-vips-8.0 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5915 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5915-1 [email protected] https://www.debian.org/security/...

CVE-2025-4114

A vulnerability classified as critical has been found in Netgear JWNR2000v2 1.0.0.11. Affected is the function checklanguagefile. The manipulation of the argument host leads to buffer overflow. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but...

CVE-2025-4150 Netgear EX6200 sub_54340 buffer overflow

A vulnerability was found in Netgear EX6200 1.0.3.94. It has been declared as critical. This vulnerability affects the function sub54340. The manipulation of the argument host leads to buffer overflow. The attack can be initiated remotely. The vendor was contacted early about this disclosure but...

CVE-2025-4079

CVE-2025-4079 affects PCMan FTP Server up to v2.0.7, where the vulnerability resides in the RENAME Command Handler. The issue is described as a buffer overflow caused by insufficient validation of input length/size, allowing a remote attacker to trigger exploitation. The available connected sourc...

AlmaLinux 9 : glibc (ALSA-2025:4244)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:4244 advisory. glibc: buffer overflow in the GNU C Library's assert CVE-2025-0395 Tenable has extracted the preceding description block directly from the AlmaLinux security...

CVE-2025-2851

A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mang...

CVE-2025-3854

A vulnerability, which was classified as critical, was found in H3C GR-3000AX up to V100R006. Affected is the function EnableIpv6/UpdateWanModeMulti/UpdateIpv6Params/EditWlanMacList/EditListSSID of the file /goform/aspForm of the component HTTP POST Request Handler. The manipulation of the argume...

Tenda AC10 cloneType2 parameter buffer overflow vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability that stems from the cloneType2 parameter in AdvSetMacMtuWan failing to correctly validate the length and size of the input data, which can be exploited by an attacker to...

Tenda AC10 mac2 parameter buffer overflow vulnerability

The Tenda AC10 is a wireless router from the Chinese company Tenda. The Tenda AC10 suffers from a buffer overflow vulnerability that originates from the mac2 parameter in AdvSetMacMtuWan failing to properly validate the length and size of the input data, which can be exploited by an attacker to...

PT-2025-17851 · Unknown · Istar Configuration Utility

Name of the Vulnerable Software and Affected Versions: iSTAR Configuration Utility ICU affected versions not specified Description: The issue is related to a buffer overflow that could occur under certain circumstances in the iSTAR Configuration Utility ICU tool. Recommendations: At the moment,...

Tenda W12 Buffer Overflow Vulnerability

The Tenda W12 is a wireless router that provides wireless network connectivity. A buffer overflow vulnerability exists in Tenda W12 version 3.0.0.5, which originates from the cgiWifiRadioSet function in the /bin/httpd file that fails to properly validate input data when processing a specific...

CVE-2025-28033

TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the...

curl: Buffer Overflow in curl MQTT Test Server (tests/server/mqttd.c) via Malicious CONNECT Packet

Title: Buffer Overflow in curl MQTT Test Server mqttd.c via Malicious CONNECT Packet Description The MQTT test server mqttd.c in the curl project contains a buffer overflow vulnerability due to improper validation of password length fields in MQTT CONNECT packets. An attacker can craft a maliciou...

PT-2025-17213 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version V4.0si V16.03.10.20 Description: The issue is related to a Buffer Overflow in AdvSetMacMtuWan via wanMTU2. This allows for potential exploitation. No information is provided about the estimated number of potentially affecte...

PT-2025-18270 · NetGear · Netgear Wnr2000V2

Name of the Vulnerable Software and Affected Versions: Netgear JWNR2000v2 version 1.0.0.11 Description: A critical vulnerability was found in the default version is new function. The manipulation of the host argument leads to a buffer overflow. This issue can be exploited remotely. The vendor was...

CVE-2025-22104

The CVE-2025-22104 issue concerns the ibmvnic driver in the Linux kernel. The root cause was printing hex dumps by casting the buffer to an 8-byte long and using string formatters, which could trigger a read buffer overflow if the buffer size isn’t a multiple of 8. The fix introduces a new ibmvni...

Medium: glibc

Issue Overview: When the assert function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. CVE-2025-0395 Affected...

CVE-2025-25458

Tenda AC10 V4.0siV16.03.10.20 is vulnerable to Buffer Overflow in AdvSetMacMtuWan via serverName2...

CVE-2025-28136

TOTOLINK A800R (firmware V4.1.2cu.5137_B20200730) contains a buffer overflow in the downloadFile.cgi component. The issue arises from improper validation of input data length in that CGI, with impact described as a buffer overflow (CVSS-ish context indicates Network access with low attack complex...