EUVD-2025-31454

Malicious code in bioql PyPI...

CVE-2025-60660

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function...

CVE-2025-60660

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function...

CVE-2025-60660

CVE-2025-60660 affects Tenda AC18 firmware version 15.03.05.19. The vulnerability is a stack overflow in the fromAdvSetMacMtuWan function triggered by the mac parameter, as described by CNVD-2025-24471 and corroborated by NVD/Red Hat/CNNVD entries. Reported impact is denial of service. Public exp...

CVE-2025-60660

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function...

CVE-2025-60660: Out-of-bounds Write

Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function...

CVE-2025-61045

TOTOLINK X18 V9.1.0cu.2053B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function...

CVE-2025-61045

TOTOLINK X18 V9.1.0cu.2053B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function...

TOTOLINK X18 命令注入漏洞

TOTOLINK X18 is a Mesh WiFi 6 router system from TOTOLINK Taiwan, which supports WiFi 6 technology and optimizes home network coverage through the mesh function. TOTOLINK X18 suffers from a command injection vulnerability that stems from the mac parameter in the setEasyMeshAgentCfg function faili...

CVE-2025-61045

TOTOLINK X18 V9.1.0cu.2053B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function...

PT-2025-40255

Name of the Vulnerable Software and Affected Versions TOTOLINK X18 version V9.1.0cu.2053 B20230309 Description The setEasyMeshAgentCfg function in the TOTOLINK X18 router firmware does not properly sanitize data at the management level when processing the mac parameter. This can allow a remote...

CVE-2025-61045

CVE-2025-61045 affects TOTOLINK X18 with firmware version 9.1.0cu.2053_B20230309. The setEasyMeshAgentCfg function’s mac parameter is susceptible to command injection due to insufficient filtering of command characters, enabling arbitrary command execution. Public reports (CNVD/Red Hat/NVD) confi...

CVE-2025-61045: Improper Neutralization of Special Elements used in a Command

TOTOLINK X18 V9.1.0cu.2053B20230309 was discovered to contain a command injection vulnerability via the mac parameter in the setEasyMeshAgentCfg function...

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23370)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that stems from a misuse of the parameter mac in the file /goform/setdevicename, which can be exploited by an attacker to cause remote command injection...

CVE-2025-11097

A vulnerability has been found in D-Link DIR-823X 250416. Impacted is an unknown function of the file /goform/setdevicename. The manipulation of the argument mac leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be...

D-Link DIR-823X 命令注入漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that stems from a misuse of the parameter mac in the file /goform/setdevicename, which can be exploited by an attacker to cause remote command injection...

PT-2025-39759

Name of the Vulnerable Software and Affected Versions D-Link DIR-823X version 250416 Description A flaw exists in D-Link DIR-823X 250416 that allows remote command injection. The issue is located in an unknown function of the file /goform/set device name. Manipulating the mac argument can trigger...

CVE-2025-10962 Wavlink NU516U1 SetName wireless.cgi sub_403198 command injection

A vulnerability was identified in Wavlink NU516U1 M16U1V240425. This impacts the function sub403198 of the file /cgi-bin/wireless.cgi of the component SetName Page. The manipulation of the argument mac5g leads to command injection. It is possible to initiate the attack remotely. The exploit is...

CVE-2025-10120

A vulnerability was detected in Tenda AC20 up to 16.03.08.12. The impacted element is the function strcpy of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in buffer overflow. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2025-10120

The CVE-2025-10120 entry affects Tenda AC20 before 16.03.08.12. The vulnerability is a buffer overflow in the strcpy usage of /goform/GetParentControlInfo when processing the mac parameter. It can be triggered remotely, and public PoCs/exploits exist. Impact is consistent with high-severity, incl...