EUVD-2024-20066

Malicious code in bioql PyPI...

EUVD-2025-26602

Malicious code in bioql PyPI...

EUVD-2025-24053

Malicious code in bioql PyPI...

EUVD-2025-24944

Malicious code in bioql PyPI...

TotalLink A3002R Router Web Server DoS

The vulnerability of the built-in web server boa /boafrm/formMapDelDevice of the Totolink A3002R router’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

TotalLink A3002R Router Web Server DoS

The vulnerability of the built-in web server boa /boafrm/formPortFw of the Totolink A3002R router’s microprogramming software is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

VulnCheck KEV: CVE-2023-50381

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

CVE-2025-56498

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit...

CVE-2025-56498

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit...

CVE-2025-56498

An OS command injection vulnerability exists in the PLDT WiFi Router's Prolink PGN6401V (Firmware version 8.1.2 ) web management interface. The flaw occurs because the ping6.asp page submits the pingAddr parameter to the /boaform/formPing6 endpoint without proper sanitization. An authenticated at...

CVE-2025-56498: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability exists in PLDT WiFi Router's Prolink PGN6401V Firmware 8.1.2 web management interface. The ping6.asp page submits user input to the /boaform/formPing6 endpoint via the pingAddr parameter, which is not properly sanitized. An authenticated attacker can exploit...

PT-2025-35785

Name of the Vulnerable Software and Affected Versions: PLDT WiFi Router Prolink PGN6401V Firmware version 8.1.2 Description: An OS command injection flaw exists in the web management interface. The ping6.asp page submits user input to the /boaform/formPing6 API endpoint via the pingAddr parameter...

Unspecified Vulnerability in D-Link DIR-619L

D-Link DIR-619L is a home wireless router from AUO D-Link, designed for home and small office environments, utilizing the IEEE 802.11n wireless standard with a maximum transmission rate of 300Mbps. A security vulnerability exists in the D-Link DIR-619L, which stems from insufficient validation of...

TOTOLINK EX1200T Router Arbitrary Command Execution

The vulnerability of the built-in web server boa /boafrm/formReflashClientTbl of TOTOLINK EX1200T router microprogramming software is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands or cause ...

TOTOLINK EX1200T Web Server Data Compromise

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP in the HTTP POST Request Handler of the microprogramming software for router devices TOTOLINK EX1200T lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an...

boa HTTP Server Data Compromise

The vulnerability of the built-in web server component boa /boafrm/formTmultiAP of the HTTP POST Request Handler in the microprogramming software for TOTOLINK A3002R and A3002RU routers is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability...

CVE-2025-8978

A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2025-8978

A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2025-8978

A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...

CVE-2025-8978 D-Link DIR-619L boa FirmwareUpgrade data authenticity

A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...