CVE Vulnerability Advisory Database

[Affected Scope] All web servers, browsers, Node.js environments, and backend applications using Google Brotli library versions 1.0.3 through 1.2.0

[Impact] Remote unauthenticated attackers can corrupt decoder state memory via crafted compressed streams, leading to sensitive data disclosure, DoS, or Remote Code Execution (RCE)

[Mitigation] Immediately update Brotli libraries and dependent packages to the latest secure versions (1.0.10, 1.1.1, 1.2.1 or higher)

[Affected Scope] DD-WRT firmware versions before build 45724 with UPnP functionality enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code or cause a Denial of Service (DoS) by sending crafted SSDP M-SEARCH requests, with active exploitation by botnets (e.g., c0xmo) confirmed in the wild [1, 2, references]

[Mitigation] Immediately upgrade DD-WRT firmware to build 45724 or later, and disable UPnP services until the patch is applied [1, references]

[Affected Scope] Zyxel GS1900-48HPv2 firmware versions up to 2.90(ABTQ.1)C0.

[Impact] Unauthenticated LAN-based attackers can execute arbitrary OS commands and gain full control of the device via crafted HTTP requests.

[Mitigation] Immediately update to the latest patched firmware and restrict access to the management interface using ACLs.

[Affected Scope] Palo Alto Networks PAN-OS software running on PA-Series and VM-Series firewalls with the User-ID™ Authentication Portal (Captive Portal) service enabled.

[Impact] An unauthenticated remote attacker can execute arbitrary code with root privileges on the firewall by sending specially crafted packets.

[Mitigation] Apply the latest security patches immediately, and restrict access to the User-ID™ Authentication Portal to trusted internal IP addresses only.

[Affected Scope] Multiple Fortinet appliance product lines including FortiCamera, FortiMail, FortiNDR, FortiRecorder, and FortiVoice

[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with root privileges by sending crafted HTTP requests containing a malicious hash cookie

[Mitigation] Immediately upgrade to the patched firmware versions provided by the vendor and restrict external access to management interfaces

[Affected Scope] Ivanti Connect Secure (before 22.7R2.6), Policy Secure (before 22.7R1.4), and ZTA Gateways (before 22.8R2.2)

[Impact] Unauthenticated remote attackers can trigger a stack-based buffer overflow to execute arbitrary code with root privileges on the target gateway

[Mitigation] Immediately apply the official security patches provided by the vendor and restrict access to external-facing management interfaces

[Affected Scope] Major Linux distributions (RHEL, Ubuntu, Debian, Fedora, etc.) running glibc version 2.34 and newer that support the GLIBC_TUNABLES environment variable.

[Impact] Local attackers can exploit a heap-based buffer overflow by crafting malicious GLIBC_TUNABLES environment variables when executing SUID binaries, leading to full root privilege escalation.

[Mitigation] Immediately update the glibc package to the latest patched version using the OS package manager and reboot the system.

[Affected Scope] Apple iOS and iPadOS prior to 16.6.1, macOS Monterey prior to 12.6.9, macOS Ventura prior to 13.5.2, iOS/iPadOS prior to 15.7.9, and macOS Big Sur prior to 11.7.10

[Impact] Processing a maliciously crafted image can trigger a buffer overflow, leading to arbitrary code execution (RCE) and potential system takeover

[Mitigation] Immediately apply the official security updates (iOS 16.6.1, macOS 13.5.2, etc.) and consider enabling Lockdown Mode for high-risk environments

[Affected Scope] D-Link GO-RT-AC750 hardware revA (firmware v101b03 and prior) and revB (firmware FWv200b02 and prior).

[Impact] Unauthenticated remote attackers can execute arbitrary code with root privileges or cause a complete system compromise by sending crafted HTTP requests to the WAN/LAN interface.

[Mitigation] Apply the latest firmware updates immediately, or replace end-of-life (EoL) devices and disable remote WAN management interfaces.

[Affected Scope] Sophos XG Firewall v17.0, v17.1, and v17.5 (v17.5 MR12 and prior) with Clientless VPN Access feature enabled

[Impact] Unauthenticated remote attackers can execute arbitrary code (RCE) or cause a Denial of Service (DoS) on the firewall via specially crafted HTTP/S requests

[Mitigation] Apply official hotfix HF062020.1, upgrade to the latest firmware, and restrict WAN access to the User Portal and SSL VPN ports

[Affected Scope] Microsoft Windows 2000, XP, Server 2003, Vista, Server 2008, and Windows 7 Pre-Beta

[Impact] Unauthenticated remote attackers can execute arbitrary code with SYSTEM privileges and gain full control of the target system via crafted RPC requests

[Mitigation] Apply the official Microsoft security patch (MS08-067) immediately and restrict external access to SMB ports (TCP 139/445)