492 matches found
CVE-2025-45847
ALFA AIP-W512 v3.2.2.2.3 was discovered to contain an authenticated stack overflow via the targetAPMac parameter in the formWsc function...
PT-2025-20393 · Totolink · Totolink Nr1800X
Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6681 B20230703 Description: The issue is an authenticated stack overflow that occurs via the ssid parameter in the setWiFiBasicCfg function. This allows for potential exploitation. No information is provided...
PT-2025-19987 · Libxmp +1 · Libxmp +1
Name of the Vulnerable Software and Affected Versions: Libxmp versions 4.6.2 and earlier Description: The issue is a stack-based buffer overflow in the depack pha function in loaders/prowizard/pha.c, which occurs when processing a malformed Pha format tracker module in a .mod file. Recommendation...
CVE-2025-44900
In Tenda RX3 V1.0brV16.03.13.11 in the GetParentControlInfo function of the web url /goform/GetParentControlInfo, the manipulation of the parameter mac leads to stack overflow...
PT-2025-18178 · Unknown · Simple Movie Ticket Booking System
Name of the Vulnerable Software and Affected Versions: Simple Movie Ticket Booking System version 1.0 Description: A critical vulnerability was found in the Simple Movie Ticket Booking System. The issue affects the changeprize function, where manipulation of the prize argument leads to a...
CVE-2025-45429
CVE-2025-45429 affects Tenda AC9 v1.0 with firmware V15.03.05.14_multi. The vulnerability is a stack overflow in the /goform/WifiWpsStart API endpoint, enabling remote arbitrary code execution. Documents consistently describe this entry and confirm impact is remote and high/critical (CVSSv3.1: 9....
PT-2025-22292 · Unknown · Fw-Wgs-804Hpt
Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the stp conf name parameter in the web stp globalSetting post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, as a temporary...
PT-2025-22305 · Unknown · Fw-Wgs-804Hpt
Name of the Vulnerable Software and Affected Versions: FW-WGS-804HPT version 1.305b241111 Description: A stack overflow issue was discovered via the bindEditMACName parameter in the web acl bindEdit post function. Recommendations: For FW-WGS-804HPT version 1.305b241111, consider restricting acces...
CVE-2025-28144
Edimax AC1200 Wave 2 Dual-Band Gigabit Router BR-6478AC V3 1.0.15 was discovered to contain a stack overflow vlunerability via peerPin parameter in the formWsc function...
CVE-2025-22911
RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formiNICbasicREP function...
Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion
An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow...
PT-2025-15477 · Unknown · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch affected versions not specified Description: An issue was discovered where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stack overflow. Recommendations: At the...
CVE-2025-26006
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setAutorest...
CVE-2025-26011
Telesquare TLR-2005KSH 1.1.4 has an unauthorized stack overflow vulnerability when requesting the admin.cgi parameter with setUsernamePassword...
CVE-2025-28361
Unauthorized stack overflow vulnerability in Telesquare TLR-2005KSH v.1.1.4 allows a remote attacker to obtain sensitive information via the systemutil.cgi component...
CVE-2024-13903
A vulnerability was found in quickjs-ng QuickJS up to 0.8.0. It has been declared as problematic. Affected by this vulnerability is the function JSGetRuntime of the file quickjs.c of the component qjs. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely...
CVE-2025-29215
Tenda AX12 v22.03.01.46CN was discovered to contain a stack overflow via the sub43fdcc function at /goform/SetNetControlList...
CVE-2025-29214
The CVE-2025-29214 entry concerns Tenda AX12, affected firmware v22.03.01.46_CN, where a stack overflow is triggered in the sub_42F69C function at /goform/setMacFilterCfg. Multiple connected sources describe a buffer/stack overflow that could be exploited to execute arbitrary code or cause a deni...