EUVD-2025-12097

Malicious code in bioql PyPI...

EUVD-2022-33966

Malicious code in bioql PyPI...

CVE-2024-42546

TOTOLINK A3100R V4.1.2cu.5050B20200504 has a buffer overflow vulnerability in the password parameter in the loginauth function...

CVE-2024-42547

TOTOLINK A3100R V4.1.2cu.5050B20200504 has a buffer overflow vulnerability in the httphost parameter in the loginauth function...

CVE-2024-7158

A vulnerability was found in TOTOLINK A3100R 4.1.2cu.5050B20200504. It has been declared as critical. This vulnerability affects the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument telnetenabled leads to command...

CVE-2022-29640

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29639

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a command injection vulnerability via the magicid parameter in the function ucicloudupdateconfig...

CVE-2022-29644

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for the telnet service stored in the component /webcste/cgi-bin/product.ini...

CVE-2022-29641

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the startTime and endTime parameters in the function setParentalRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29642

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the url parameter in the function setUrlFilterRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-29646

An access control issue in TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 allows attackers to obtain sensitive information via a crafted web request...

CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample...

CVE-2022-29638

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the comment parameter in the function setIpQosRules. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted POST request...

CVE-2022-25077

TOTOLink A3100R V4.1.2cu.5050B20200504 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

CVE-2021-46006

In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authentication...

TOTOLINK A3100R setMacQos function buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability that originates from the failure of the priority parameter of the setMacQos interface in /lib/cstemodules/firewall.so to correctly validate the...

TOTOLINK A3100R setParentalRules function buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. TOTOLINK A3100R suffers from a buffer overflow vulnerability that stems from the urlKeyword parameter in setParentalRules failing to correctly validate the length size of the input data, no details of the...

TOTOLINK A3100R setMacFilterRules function buffer overflow vulnerability

TOTOLINK A3100R is a series of wireless routers from China's Gion Electronics TOTOLINK. The TOTOLINK A3100R suffers from a buffer overflow vulnerability that stems from the comment parameter in setMacFilterRules failing to correctly validate the length size of the input data, no detailed...

The vulnerability of the setMacQos function in the /lib/cste_modules/firewall.so module of the TOTOLINK A3100R router’s software allows a attacker to cause a service failure.

The vulnerability of the setMacQos function in the /lib/cstemodules/firewall.so module of the TOTOLINK A3100R router’s software is related to buffer overflows in the stack when processing the priority parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by...

The vulnerability of the setMacFilterRules function in TOTOLINK A3100R router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the setMacFilterRules function in TOTOLINK A3100R router microprogramming software is related to buffer overflows in the stack when processing the comment parameter. Exploiting this vulnerability can allow an attacker to cause service interruptions by sending specially crafte...