PT-2023-6405 · Yifan · Yifan Yf325

Name of the Vulnerable Software and Affected Versions: Yifan YF325 version 1.0 20221108 Description: A stack-based buffer overflow vulnerability exists in the httpd gwcfg.cgi get functionality. This issue can be triggered by a specially crafted network packet, potentially leading to command...

PT-2023-29034 · Nothings +3 · Stb +3

Name of the Vulnerable Software and Affected Versions: Nothings stb version 2.28 Description: The issue is related to a Null Pointer Dereference via the stbi convert format function, allowing attackers to cause a Denial of Service DoS by using a crafted pic file. Recommendations: For Nothings stb...

PT-2023-27210 · Vyper · Vyper

Name of the Vulnerable Software and Affected Versions: Vyper affected versions not specified Description: The Vyper compiler evaluates arguments from right to left instead of left to right for certain expressions, including unsafe add, unsafe sub, unsafe mul, unsafe div, pow mod256, |, &, ^ bitwi...

PT-2023-19417 · Jensen Of Scandinavia · Jensen Of Scandinavia Eagle 1200Ac

Name of the Vulnerable Software and Affected Versions: Jensen of Scandinavia Eagle 1200AC version 15.03.06.33 en Description: A stack overflow issue was discovered via the wepkey4 5g parameter at the "/goform/WifiBasicSet" API endpoint. Recommendations: For version 15.03.06.33 en, as a temporary...

PT-2023-18539 · Flarum · Flarum

Name of the Vulnerable Software and Affected Versions: Flarum versions prior to 1.6.3 Description: The issue allows an actor to read restricted or private content and bypass access checks by using the notifications feature. The notification-sending component does not verify if the subject of the...

PT-2022-25913 · Totolink · Totolink Nr1800X

Name of the Vulnerable Software and Affected Versions: TOTOLINK NR1800X version 9.1.0u.6279 B20210910 Description: The issue is an authenticated stack overflow that occurs via the ip parameter in the setDiagnosisCfg function. This allows for potential exploitation. Recommendations: For TOTOLINK...

PT-2022-17672 · Sap · Sap Netweaver Application Server Abap

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver Application Server for ABAP versions 700, 701, 702, 731 Description: The issue is due to a missing authorization check, allowing an authenticated attacker to access content on the start screen of any transaction within the same...

PT-2022-12110 · Reolink · Reolink Rlc-410W

Name of the Vulnerable Software and Affected Versions: reolink RLC-410W version 3.0.0.136 20121102 Description: A denial of service issue exists in the cgiserver.cgi JSON command parser functionality. This can be triggered by a specially-crafted HTTP request, leading to a reboot. The AddUser para...

PT-2017-16798 · Zziplib +3 · Zziplib +3

Name of the Vulnerable Software and Affected Versions: zziplib versions 0.13.56 through 0.13.62 Description: The issue is related to a heap-based buffer overflow in the zzip get32 function, located in the fetch.c file of zziplib. This allows remote attackers to cause a denial of service, resultin...