Lucene search
K

3630 matches found

Cvelist
Cvelist
added 2025/07/13 9:32 a.m.8 views

CVE-2025-7525 TOTOLINK T6 HTTP POST Request cstecgi.cgi setTracerouteCfg command injection

A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument command leads to command injectio...

6.5CVSS0.04474EPSS
Exploits1References7
OSV
OSV
added 2025/07/13 9:15 a.m.1 views

CVE-2025-7524

A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. It is possible ...

8.8CVSS5.7AI score
Exploits0References7
NVD
NVD
added 2025/07/13 9:15 a.m.4 views

CVE-2025-7524

A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. It is possible ...

8.8CVSS0.04474EPSS
Exploits1References7
Cvelist
Cvelist
added 2025/07/13 9:2 a.m.10 views

CVE-2025-7524 TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection

A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. It is possible ...

6.5CVSS0.04474EPSS
Exploits1References7
CVE
CVE
added 2025/07/13 9:2 a.m.23 views

CVE-2025-7524

The CVE-2025-7524 entry concerns the TOTOLINK T6 router (version 4.1.5cu.748_B20211015). The vulnerability resides in the HTTP POST Request Handler’s cstecgi.cgi file, specifically in the setDiagnosisCfg function where the ip argument is manipulated, enabling remote command injection. The issue i...

8.8CVSS6.9AI score0.04474EPSS
Exploits1References7Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/13 9:2 a.m.3 views

CVE-2025-7524 TOTOLINK T6 HTTP POST Request cstecgi.cgi setDiagnosisCfg command injection

A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015. It has been classified as critical. This affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component HTTP POST Request Handler. The manipulation of the argument ip leads to command injection. It is possible ...

6.5CVSS6.9AI score0.04474EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.3 views

PT-2025-29474 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 Description: A critical issue exists in the HTTP POST Request Handler component of the software. The delDevice function within the /cgi-bin/cstecgi.cgi file is susceptible to command injection through...

8.8CVSS6.8AI score0.04554EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.2 views

PT-2025-29473 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 Description: A critical issue exists in TOTOLINK T6 version 4.1.5cu.748. The vulnerability is located within the CloudSrvVersionCheck function of the /cgi-bin/cstecgi.cgi file, part of the HTTP POST Request...

8.8CVSS6.7AI score0.04554EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2025/07/13 12:0 a.m.3 views

PT-2025-29475 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: TOTOLINK T6 version 4.1.5cu.748 Description: A critical vulnerability exists in the HTTP POST Request Handler component of TOTOLINK T6. The vulnerability is due to command injection in the clearPairCfg function within the /cgi-bin/cstecgi.cgi...

8.8CVSS7AI score0.04554EPSS
Exploits1References12
NVD
NVD
added 2025/07/12 11:15 p.m.2 views

CVE-2025-7505

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function frmL7ProtForm of the file /goform/L7Prot of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the atta...

9CVSS0.00885EPSS
Exploits1References6
NVD
NVD
added 2025/07/12 11:15 p.m.3 views

CVE-2025-7506

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatlimit of the file /goform/Natlimit of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack can ...

9CVSS0.00885EPSS
Exploits1References6
OSV
OSV
added 2025/07/12 11:15 p.m.2 views

CVE-2025-7506

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatlimit of the file /goform/Natlimit of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack can ...

8.7CVSS6.6AI score0.00885EPSS
Exploits1References6
CVE
CVE
added 2025/07/12 11:2 p.m.23 views

CVE-2025-7506

CVE-2025-7506 affects Tenda FH451 v1.0.0.9. The stack-based buffer overflow is triggered by manipulating the page argument in the fromNatlimit function of /goform/Natlimit in the HTTP POST Request Handler. The vulnerability permits remote exploitation, and public exploits are described across mul...

9CVSS7.4AI score0.00885EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/07/12 11:2 p.m.2 views

CVE-2025-7506 Tenda FH451 HTTP POST Request Natlimit fromNatlimit stack-based overflow

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatlimit of the file /goform/Natlimit of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack can ...

9CVSS7.4AI score0.00885EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/07/12 11:2 p.m.7 views

CVE-2025-7506 Tenda FH451 HTTP POST Request Natlimit fromNatlimit stack-based overflow

A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatlimit of the file /goform/Natlimit of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack can ...

9CVSS0.00885EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/07/12 10:32 p.m.2 views

CVE-2025-7505 Tenda FH451 HTTP POST Request L7Prot frmL7ProtForm stack-based overflow

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function frmL7ProtForm of the file /goform/L7Prot of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the atta...

9CVSS7.4AI score0.00885EPSS
Exploits1References6
CVE
CVE
added 2025/07/12 10:32 p.m.23 views

CVE-2025-7505

The CVE concerns Tenda FH451 (version 1.0.0.9). The flaw occurs in the HTTP POST Request Handler, specifically the function frmL7ProtForm in /goform/L7Prot, where the input argument page can cause a stack-based buffer overflow. This vulnerability is remotely exploitable and has public exploit ava...

9CVSS7.4AI score0.00885EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2025/07/12 10:32 p.m.2 views

CVE-2025-7505 Tenda FH451 HTTP POST Request L7Prot frmL7ProtForm stack-based overflow

A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function frmL7ProtForm of the file /goform/L7Prot of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the atta...

9CVSS0.00885EPSS
Exploits1References6
NVD
NVD
added 2025/07/12 9:15 a.m.2 views

CVE-2025-7468

A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attac...

9CVSS0.01103EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/07/12 9:2 a.m.5 views

CVE-2025-7468 Tenda FH1201 HTTP POST Request fromSafeUrlFilter buffer overflow

A vulnerability has been found in Tenda FH1201 1.2.0.14 and classified as critical. This vulnerability affects the function fromSafeUrlFilter of the file /goform/fromSafeUrlFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to buffer overflow. The attac...

9CVSS0.01103EPSS
Exploits1References5
Rows per page
Query Builder