EUVD-2023-28223

Malicious code in bioql PyPI...

EUVD-2023-28211

Malicious code in bioql PyPI...

EUVD-2023-28209

Malicious code in bioql PyPI...

EUVD-2023-28206

Malicious code in bioql PyPI...

EUVD-2023-28205

Malicious code in bioql PyPI...

EUVD-2023-28210

Malicious code in bioql PyPI...

EUVD-2023-28207

Malicious code in bioql PyPI...

EUVD-2023-28202

Malicious code in bioql PyPI...

EUVD-2023-28222

Malicious code in bioql PyPI...

EUVD-2023-28203

Malicious code in bioql PyPI...

EUVD-2025-19129

Malicious code in bioql PyPI...

EUVD-2025-19128

Malicious code in bioql PyPI...

EUVD-2025-19187

Malicious code in bioql PyPI...

EUVD-2025-19183

Malicious code in bioql PyPI...

EUVD-2023-28201

Malicious code in bioql PyPI...

EUVD-2024-48184

Malicious code in bioql PyPI...

TOTOLINK CA300-PoE Router setUpgradeUboot() Arbitrary Command Execution

The vulnerability of the setUpgradeUboot function in the upgrade.so library of TOTOLINK CA300-PoE router microprogramming software is related to the failure to take measures to clean data at the management level when processing the FileName parameter. Exploiting this vulnerability can allow an...

TOTOLINK CA300-PoE Router SetWLanApcliSettings() Command Execution

The vulnerability of the SetWLanApcliSettings function wps.so in the TOTOLINK CA300-PoE router’s microprogramming software is related to the lack of measures taken at the control level during the processing of the PIN parameter. Exploiting this vulnerability could allow an attacker to execute...

TOTOLINK CA300-PoE Arbitrary Command Execution

The vulnerability of the QuickSetting function ap.so in the TOTOLINK CA300-PoE router’s microprogramming system is related to the lack of measures taken to clean data at the control level when processing the hour/minute parameter. Exploiting this vulnerability could allow a remote attacker to...

CVE-2025-6619

A vulnerability was found in TOTOLINK CA300-PoE 6.2c.884. It has been declared as critical. Affected by this vulnerability is the function setUpgradeFW of the file upgrade.so. The manipulation of the argument FileName leads to os command injection. The attack can be launched remotely. The exploit...