{"vulnerability": "cve-2023-4089", "sightings": [{"uuid": "0d96c53e-3da2-4b34-9ae5-eded032339d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/20032", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-40890\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\ud83d\udccf Published: 2023-08-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-07-01T13:48:02.663Z\n\ud83d\udd17 References:\n1. https://hackmd.io/%40cspl/H1PxPAUnn\n2. https://lists.debian.org/debian-lts-announce/2023/12/msg00001.html\n3. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/25LZZQJGGZRPLKTRNRNOTAFQJIPS7WRP/\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DC7V5YCLCPB36J2KY6WLZCABFLBRB665/", "creation_timestamp": "2025-07-01T14:11:19.000000Z"}, {"uuid": "1a80dcef-9b94-4cba-9858-c0a0a71d9ef2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40893", "type": "seen", "source": "https://t.me/cibsecurity/69137", "content": "\u203c CVE-2023-40893 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:29.000000Z"}, {"uuid": "4957b8a6-6340-41c0-b3a3-a0c3a3d8e324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40896", "type": "seen", "source": "https://t.me/cibsecurity/69140", "content": "\u203c CVE-2023-40896 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:35.000000Z"}, {"uuid": "ca2094ba-40ad-49f2-8d00-a28f2144cc57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40890", "type": "seen", "source": "https://t.me/cibsecurity/69368", "content": "\u203c CVE-2023-40890 \u203c\n\nA stack-based buffer overflow vulnerability exists in the lookup_sequence function of ZBar 0.23.90. Specially crafted QR codes may lead to information disclosure and/or arbitrary code execution. To trigger this vulnerability, an attacker can digitally input the malicious QR code, or prepare it to be physically scanned by the vulnerable scanner.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-29T20:17:47.000000Z"}, {"uuid": "8d8c4e34-4710-4289-82e6-aab01040703f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40891", "type": "seen", "source": "https://t.me/cibsecurity/69147", "content": "\u203c CVE-2023-40891 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:45.000000Z"}, {"uuid": "8bf0480c-cf50-4abe-b1a2-b1dbd3a1b166", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40892", "type": "seen", "source": "https://t.me/cibsecurity/69144", "content": "\u203c CVE-2023-40892 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter schedStartTime and schedEndTime at /goform/openSchedWifi.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:42.000000Z"}, {"uuid": "d6984bf8-e477-4853-b416-f5386ba7f89e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40894", "type": "seen", "source": "https://t.me/cibsecurity/69143", "content": "\u203c CVE-2023-40894 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetStaticRouteCfg.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:38.000000Z"}, {"uuid": "5ca071df-3806-4918-b0f8-3cb47048b696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40897", "type": "seen", "source": "https://t.me/cibsecurity/69142", "content": "\u203c CVE-2023-40897 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter mac at /goform/GetParentControlInfo.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:37.000000Z"}, {"uuid": "581cff30-100d-4ab4-ae87-3f9bce73d6a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40898", "type": "seen", "source": "https://t.me/cibsecurity/69151", "content": "\u203c CVE-2023-40898 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter timeZone at /goform/SetSysTimeCfg.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:52.000000Z"}, {"uuid": "3d10ee2e-c2f7-48d5-a8c2-733e438534a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40899", "type": "seen", "source": "https://t.me/cibsecurity/69136", "content": "\u203c CVE-2023-40899 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:28.000000Z"}, {"uuid": "a9c649bc-8316-4199-894f-f88ea430a512", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-40895", "type": "seen", "source": "https://t.me/cibsecurity/69134", "content": "\u203c CVE-2023-40895 \u203c\n\nTenda AC8 v4 US_AC8V4.0si_V16.03.34.06_cn was discovered to contain a stack overflow via parameter list at /goform/SetVirtualServerCfg.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-24T22:13:27.000000Z"}]}