https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 18:07:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-364345 EUVD-2026-364345 https://cve.radiocsirt.org/vuln/euvd-2026-364345 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54209 <p>Tobit Laboratories AG TeamDavid&#39;s Webbox application handles password changes using a function triggered by including the string &#34;(editini)&#34; in the file path, writing the new password to the specified &#34;Archive.ini&#34; file. However, the application does not verify that the provided path actually refers to an &#34;Archive.ini&#34; file. If an attacker specifies a different file with excessive size, a buffer overflow occurs. This vulnerability allows an unauthenticated attacker to crash the server, resulting in denial of service. This issue affects TeamDavid before Rollout 528.</p> <p>Starting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed through this functionality.</p> <p>Tobit Laboratories AG TeamDavid&#39;s Webbox application handles password changes using a function triggered by including the string &#34;(editini)&#34; in the file path, writing the new password to the specified &#34;Archive.ini&#34; file. However, the application does not verify that the provided path actually refers to an &#34;Archive.ini&#34; file. If an attacker specifies a different file with excessive size, a buffer overflow occurs. This vulnerability allows an unauthenticated attacker to crash the server, resulting in denial of service. This issue affects TeamDavid before Rollout 528.</p> <p>Starting with Rollout 528 (June 30, 2026), the affected functionality is disabled by default and the vulnerabilities are therefore no longer exposed through this functionality.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54209 https://cve.radiocsirt.org/vuln/ghsa-4x8q-mprg-xpmc <p>Tobit Laboratories AG TeamDavid&#39;s Webbox application handles password changes using a function triggered by including the string &#34;(editini)&#34; in the file path, writing the new password to the specified &#34;Archive.ini&#34; file. However, the application does not verify that the provided path actually refers to an &#34;Archive.ini&#34; file. If an attacker specifies a different file with excessive size, a buffer overflow occurs. This vulnerability allows an unauthenticated attacker to crash the server, resulting in denial of service. This issue affects TeamDavid through Rollout 524.</p> <p>Tobit Laboratories AG TeamDavid&#39;s Webbox application handles password changes using a function triggered by including the string &#34;(editini)&#34; in the file path, writing the new password to the specified &#34;Archive.ini&#34; file. However, the application does not verify that the provided path actually refers to an &#34;Archive.ini&#34; file. If an attacker specifies a different file with excessive size, a buffer overflow occurs. This vulnerability allows an unauthenticated attacker to crash the server, resulting in denial of service. This issue affects TeamDavid through Rollout 524.</p> https://cve.radiocsirt.org/vuln/ghsa-4x8q-mprg-xpmc