sunwithmoon

[CVE ID]
CVE-2024-28457
[NAME OF AFFECTED PRODUCT(S)]
D-LINK Go-RT-AC750
[AFFECTED AND/OR FIXED VERSION(S)]
v101b03 and before
[PROBLEM TYPE]
Buffer Overflow
[DESCRIPTION]
Buffer Overflow vulnerability in D-Link Go-RT-AC750 revA_v101b03 allows a remote attacker to execute arbitrary code via the sub_40DF74 function in the soap.cgi component.

sunwithmoon

[CVE ID]
CVE-2024-27683
[NAME OF AFFECTED PRODUCT(S)]
D-LINK Go-RT-AC750
[AFFECTED AND/OR FIXED VERSION(S)]
v101b03 and before
[PROBLEM TYPE]
Buffer Overflow
[DESCRIPTION]
D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.

sunwithmoon

[CVE ID]
CVE-2023-44709
[NAME OF AFFECTED PRODUCT(S)]
PlutoSVG (https://github.com/sammycage/plutosvg)
[AFFECTED AND/OR FIXED VERSION(S)]
PlutoSVG (commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before)
[PROBLEM TYPE]
Integer Overflow
[DESCRIPTION]
An integer overflow in the allocated size exists in PlutoSVG (commit 336c02997277a1888e6ccbbbe674551a0582e5c4 and before) via the plutosvg_load_from_memory function in plutosvg.c. It might lead to heap overflow and arbitrary code execution.