ASUS 路由器 - Stack-based Buffer Overflow

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-7858-3c978-2.html
• https://nvd.nist.gov/vuln/detail/CVE-2025-59365
• https://github.com/advisories/GHSA-g5h2-93mg-7m48
• https://cexplr.github.io/blog/asuswrt-url-processing-stack-buffer-overflow
• https://www.sentinelone.com/vulnerability-database/cve-2024-3079/
• https://starlabs.sg/blog/2020/08-asuswrt-url-processing-stack-buffer-overflow/
• https://nvd.nist.gov/vuln/detail/cve-2024-3079
• https://blog.securityevaluators.com/asuswrt-buffer-overflow-format-string-aslr-bypass-2bbf9736fe46
• https://nvd.nist.gov/vuln/detail/cve-2018-17022

Related Vulnerabilities

• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• WordPress WebStack主题 /wp-admin/admin-ajax.php 文件上传漏洞（CVE-2026-1555）
• CentreStack 本地文件包含漏洞(CVE-2025-11371)
• 全程云 /OA/api/2.0/HR/EntryApply/GetBaseData SQL 注入漏洞
• Apache CloudStack /client/api/ 默认口令漏洞
• Gladinet CentreStack & Triofox /storage/filesvr.dn 文件读取漏洞（CVE-2025-14611）
• ERPNext /api/method/erpnext.stock.doctype.material_request.material_request.get_material_requests_based_on_supplier SQL 注入漏洞（CVE-2025-52039）
• PoCCVE-2025-62613: VDO.Ninja - DOM-Based Cross-Site Scripting
• PoCservicestack-requestlogs: ServiceStack Request Logs - Unauthenticated Access
• PoCCVE-2025-14611: Gladinet CentreStack & Triofox - Hardcoded Credentials
• （CVE-2025-14611）Gladinet CentreStack和Triofox AES加密硬编码漏洞导致任意文件包含及安全降级
• 易达科技-ECMS getProjectBaseDocData SQL注入漏洞
• PoC易达科技-ECMS getProjectBaseDocData 存在SQL注入漏洞