EUVD-2026-52167

A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENTLENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component...

CVE-2026-18588: Stack-based Buffer Overflow

A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENTLENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component...

CVE-2025-67445: Uncontrolled Resource Consumption

TOTOLINK X5000R V9.1.0cu.2415B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. The CGI reads the CONTENTLENGTH environment variable and allocates memory using malloc CONTENTLENGTH + 1 without sufficient bounds checking. When lighttpd s request size limit is not enforce...

EUVD-2025-19717

Malicious code in bioql PyPI...

CVE-2025-50635: NULL Pointer Dereference

A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENTLENGTH variable, causing the program to crash and potentially leadin...

CVE-2025-45029

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2025-45029

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2025-45029

The WINSTAR WN572HP3 Wi-Fi signal booster (version v230525 ) is vulnerable to a heap overflow in dynamic memory. The issue is triggered by the CONTENT_LENGTH variable at the /cgi-bin/upload.cgi API endpoint. An attacker exploiting this vulnerability could potentially execute arbitrary code remote...

CVE-2025-45029

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2025-45029: Heap-based Buffer Overflow

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2025-45835: NULL Pointer Dereference

A null pointer dereference vulnerability was discovered in Netis WF2880 v2.1.40207. The vulnerability exists in the FUN004904c8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the environment variable value CONTENTLENGTH, causing the program to crash and...

CVE-2022-29377

Totolink A3600R V4.1.2cu.5182B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via the parameter CONTENTLENGTH...

Design/Logic Flaw

Totolink A3600R V4.1.2cu.5182B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via the parameter CONTENTLENGTH...

CVE-2022-29377

CVE-2022-29377 affects Totolink A3600R router firmware version V4.1.2cu.5182_B20201102. The vulnerability is a stack overflow in the fread function of infostat.cgi, caused by improper handling of CONTENT_LENGTH, which can be exploited to trigger a Denial of Service (DoS). The available documents ...

CVE-2022-29377: Out-of-bounds Write

Totolink A3600R V4.1.2cu.5182B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via the parameter CONTENTLENGTH...