EUVD-2025-37386

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub42396C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-37380

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the wifiOff parameter in the sub4232EC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-37388

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub421CF0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-37389

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub4222E0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-37385

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub422880 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

EUVD-2025-37368

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub421BAC function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63461

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63461

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the urldecode function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-58152

FutureNet MA and IP-K series provided by Century Systems Co., Ltd. put the firmware version and the garbage collection information on the internal web page. With some crafted HTTP request, they can be accessed without authentication...

CVE-2025-63460

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub4222E0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63464

Totolink LR350 v9.3.5u.6369B20220309 was discovered to contain a stack overflow via the ssid parameter in the sub42396C function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63459

Totolink A7000R v9.1.0u.6115B20201022 was discovered to contain a stack overflow via the ssid5g parameter in the sub421CF0 function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-63469

CVE-2025-63469 affects Totolink LR350 firmware (v9.3.5u.6369_B20220309). The vulnerability is a stack overflow in the sub_421BAC function triggered by the ssid parameter, allowing a crafted request to cause Denial of Service. Reports from multiple sources (NVD, RH, CNVD, CNNVD) describe the same ...

CVE-2025-63461

The CVE-2025-63461 entry concerns Totolink A7000R v9.1.0u.6115_B20201022, with a stack overflow in the urldecode function triggered by the ssid5g parameter. A crafted request can cause a Denial of Service. Connected sources (CNVD, Red Hat, NVD, CNNVD, etc.) corroborate the stack overflow/DoS symp...

EUVD-2025-37204

Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...

CVE-2025-63422

Incorrect access control in the Web management interface in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to arbitrarily change the administrator username and password via sending a crafted GET request...

CVE-2025-63422

CVE-2025-63422: Affected product is Each Italy Wireless Mini Router WIRELESS-N 300M (v28K.MiniRouter.20190211). The vulnerability is improper access control in the Web management interface that allows an attacker to arbitrarily change the administrator username and password by sending a crafted G...

EUVD-2025-36689

SQL Injection vulnerability in TypeORM before 0.3.26 via crafted request to repository.save or repository.update due to the sqlstring call using stringifyObjects default to false...

EUVD-2025-36668

An issue in NCR Atleos Terminal Manager ConfigApp v3.4.0 allows attackers to escalate privileges via a crafted request...

CVE-2025-61429

CVE-2025-61429 concerns NCR Atleos Terminal Manager (ConfigApp) v3.4.0. The connected sources describe a privilege-escalation issue exploitable by a crafted request, with CVSSv3.1 metrics indicating Network attack vector, low attack complexity, required privileges Low, no user interaction, and im...