Tmotfl

**Name of the Vulnerable Software and Affected Versions** NETGEAR (affected versions not specified) **Description** A buffer overflow occurs in certain NETGEAR models, which can be leveraged by a device administrator to temporarily interrupt the normal operation of the affected device. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially leading to crashes or unexpected behavior. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR (affected versions not specified) **Description** A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory. In this case, the issue allows an authenticated admin user to cause the device to become temporarily unavailable. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NETGEAR (affected versions not specified) **Description** A buffer overflow occurs due to insufficient input validation of buffers. This allows authenticated administrators connected to the local network to make unauthorized modifications to the router software and functionality.

**Name of the Vulnerable Software and Affected Versions** MySQL Installer versions prior to 1.6.8 **Description** The issue is related to insufficient input validation in the MySQL Installer product, specifically in the Installer: General component. This vulnerability can be easily exploited by a low-privileged attacker with logon access to the infrastructure where MySQL Installer executes, allowing them to compromise MySQL Installer. Successful attacks require human interaction from a person other than the attacker and may significantly impact additional products. The vulnerability can result in unauthorized creation, deletion, or modification access to critical data or all MySQL Installer accessible data, as well as the ability to cause a hang or frequently repeatable crash of MySQL Installer. **Recommendations** For versions prior to 1.6.8, update to version 1.6.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the MySQL Installer to minimize the risk of exploitation. Avoid using the vulnerable component until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** ASUS RT-AC86U (affected versions not specified) **Description** The issue exists due to the lack of neutralization of special elements used in the operating system command. A remote attacker with normal user privileges can exploit this to perform a command injection attack, executing arbitrary system commands, disrupting the system, or terminating the service. The vulnerability is related to the failure to filter special characters for parameters in specific web URLs. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ASUS RT-AC86U (affected versions not specified) **Description** The issue is related to a stack-based buffer overflow vulnerability in the cgi function of the ASUS RT-AC86U router's firmware, caused by insufficient validation of network packet header length. This allows a remote attacker with administrator privileges to execute arbitrary system commands, disrupt the system, or terminate the service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC version 2.3-DEV-rev35-gbbca86917-master **Description** A critical issue has been found in the file filters/load text.c of GPAC, related to buffer overflow due to unchecked input size during buffer copying. This can be exploited to overflow memory buffers. Local access is required for this attack. The issue has been publicly disclosed and may be exploited. **Recommendations** To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC version 2.3-DEV-rev35-gbbca86917-master **Description** A vulnerability has been found in the function `gf av1 reset state` of the file `media tools/av parsers.c`, which leads to double free. The manipulation can be launched on the local host. The exploit has been disclosed to the public and may be used. **Recommendations** To fix this issue, it is recommended to apply a patch. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** GPAC version 2.3-DEV-rev35-gbbca86917-master **Description** A heap-based buffer overflow issue affects the `gf m2ts process sdt` function in the `media tools/mpegts.c` file. This issue can be exploited locally, potentially leading to a denial of service. The exploit has been publicly disclosed. **Recommendations** To fix this issue, apply a patch to the affected version of GPAC. As a temporary workaround, consider disabling the `gf m2ts process sdt` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5 **Description** A critical vulnerability has been found in the Web Management Interface of DrayTek Vigor 2960, specifically in the function `getSyslogFile` of the file `mainfunction.cgi`. The issue is related to incorrect restriction of directory path names, which can lead to path traversal. This allows a remote attacker to gain unauthorized access to confidential system files. The exploit has been disclosed to the public and may be used. **Recommendations** For DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5, consider disabling the `getSyslogFile` function of the `mainfunction.cgi` file as a temporary workaround to minimize the risk of exploitation. Restrict access to the Web Management Interface to reduce the attack surface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DrayTek Vigor versions 1.5.1.4 through 1.5.1.5 **Description** The issue is related to the function sub 1225C in the mainfunction.cgi script of the DrayTek Vigor web interface, where inadequate data cleaning on the management level can be exploited. This can allow a remote attacker to execute arbitrary commands. The manipulation of the `password` argument leads to command injection, and the attack can be launched remotely. **Recommendations** For DrayTek Vigor versions 1.5.1.4 through 1.5.1.5, consider disabling the mainfunction.cgi script or restricting access to it until a fix is available. As a temporary workaround, avoid using the `password` argument in the affected web management interface to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5 **Description** A critical vulnerability has been found in the Web Management Interface of DrayTek Vigor 2960. The issue is related to the function `sub 1DF14` of the file `/cgi-bin/mainfunction.cgi`. The manipulation of the argument `option` with the input `/../etc/passwd-` leads to path traversal. This allows an attacker to gain unauthorized access to confidential system files. The attack can be launched remotely. The exploit has been disclosed to the public. **Recommendations** For DrayTek Vigor 2960 versions 1.5.1.4 through 1.5.1.5, as a temporary workaround, consider disabling the `sub 1DF14` function until a patch is available. Restrict access to the `/cgi-bin/mainfunction.cgi` file to minimize the risk of exploitation. Avoid using the `option` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.