6 matches found
EUVD-2024-16775
Malicious code in bioql PyPI...
CVE-2024-1003
Totolink N200RE is affected by CVE-2024-1003 in the setLanguageCfg function of /cgi-bin/cstecgi.cgi. The lang parameter causes a stack-based buffer overflow, with remote exploitation possible. Affected version: 9.3.5u.6139_B20201216. Public exploit details exist. PT-Security notes this as a criti...
CVE-2024-0997
Totolink N200RE is affected by CVE-2024-0997. The vulnerability resides in the function setOpModeCfg in /cgi-bin/cstecgi.cgi, where manipulating the pppoeUser parameter can cause a stack-based buffer overflow. The issue can be exploited remotely and has been publicly disclosed. Multiple sources c...
CVE-2024-0298
A vulnerability was found in Totolink N200RE 9.3.5u.6139B20201216. It has been classified as critical. Affected is the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to launch the attack remotely. The...
Totolink N350RT Security Vulnerability
TOTOLINK N350RT is a small home router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the Totolink N350RT version 9.3.5u.6139B20201216, which originates from the file /cgi-bin/cstecgi.cgi?action=login&flag=ie8's can lead to a stack-based buffer overflow...
