TOTOLINK A720R 安全漏洞

TOTOLINK A720R is a wireless router from China's Gion Electronics TOTOLINK with dual-band Wi-Fi capabilities, focusing on high-speed internet and signal coverage. The TOTOLINK A720R suffers from a command injection vulnerability that stems from insufficient validation of the sysconf binary when...

CVE-2025-60682

The connected CNVD/Red Hat/EUVD/NVD entries confirm CVE-2025-60682 affecting TOTOLINK A720R router firmware V4.1.5cu.614_B20230630, in the cloudupdate_check binary (sub_402414) where cloud update parameters are processed. User-controlled magicid and url are concatenated into shell commands and ex...

CVE-2025-60682

A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the cloudupdatecheck binary, specifically in the sub402414 function that handles cloud update parameters. User-supplied 'magicid' and 'url' values are directly concatenated into shell...

CVE-2025-60685

A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614B20230630 within the sysconf binary sub401EE0 function. The binary reads the /proc/stat file using fgets into a local buffer and subsequently parses the line using sscanf into a single-byte variable with the %s forma...

EUVD-2021-21968

Malware in sbrugna...

EUVD-2021-21967

Malware in sbrugna...

EUVD-2021-21970

Malware in sbrugna...

EUVD-2025-14982

Malicious code in bioql PyPI...

EUVD-2025-14981

Malicious code in bioql PyPI...

EUVD-2023-27164

Malicious code in bioql PyPI...

EUVD-2021-32457

Malicious code in bioql PyPI...

EUVD-2022-39314

Malicious code in bioql PyPI...

EUVD-2025-25432

Malicious code in bioql PyPI...

EUVD-2025-13368

Malicious code in bioql PyPI...

EUVD-2021-32455

Malicious code in bioql PyPI...

EUVD-2024-49442

Malicious code in bioql PyPI...

EUVD-2021-32458

Malicious code in bioql PyPI...

EUVD-2022-39165

Malicious code in bioql PyPI...

EUVD-2025-14980

Malicious code in bioql PyPI...

CVE-2025-9303

A security flaw has been discovered in TOTOLINK A720R 4.1.5cu.630B20250509. This issue affects the function setParentalRules of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument desc results in buffer overflow. The attack is possible to be carried out remotely. The exploit ha...