47 matches found
EUVD-2020-28024
Malware in sbrugna...
EUVD-2025-22043
Malicious code in bioql PyPI...
EUVD-2025-21970
Malicious code in bioql PyPI...
EUVD-2025-18091
Malicious code in bioql PyPI...
EUVD-2021-31071
Malicious code in bioql PyPI...
EUVD-2025-22046
Malicious code in bioql PyPI...
EUVD-2025-1813
Malicious code in bioql PyPI...
EUVD-2021-9084
Malicious code in bioql PyPI...
TOTOLINK T6 serverIp Parameter Buffer Overflow Vulnerability
TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T6 version 4.1.5cu.748B20211015, which stems from the failure of the parameter serverIp in the MQTT Service to correctly validate the length and size of the input...
The vulnerability of the recvSlaveStaInfo() function in the MQTT service of the TOTOLink T6 microprogramming system allows a attacker to execute arbitrary code.
The vulnerability of the recvSlaveStaInfo function in the MQTT service of the TOTOLink T6 mesh-system’s microprogramming system is related to the issue of the operation going beyond the buffer in memory when processing the dest parameter. Exploiting this vulnerability allows a remote attacker to...
CVE-2025-7913
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit ha...
CVE-2025-7912
A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748B20211015. This issue affects the function recvSlaveUpgstatus of the component MQTT Service. The manipulation of the argument s leads to buffer overflow. The attack may be initiated remotely. The exploit h...
CVE-2025-7837
A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the component MQTT Service. The manipulation of the argument dest leads to buffer overflow. The attack may be launched remotely. The exploit has bee...
CVE-2025-7913
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit ha...
CVE-2025-7913 TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit ha...
CVE-2025-7913
TOTOLINK T6 (firmware 4.1.5cu.748_B20211015) is affected in the MQTT Service, within updateWifiInfo(). The vulnerability stems from improper handling/validation of the serverIp parameter, causing a buffer overflow that can be exploited remotely. Public exploit information exists. Several sources ...
CVE-2025-7913 TOTOLINK T6 MQTT Service updateWifiInfo buffer overflow
A vulnerability, which was classified as critical, was found in TOTOLINK T6 4.1.5cu.748B20211015. Affected is the function updateWifiInfo of the component MQTT Service. The manipulation of the argument serverIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit ha...
CVE-2025-7912
A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748B20211015. This issue affects the function recvSlaveUpgstatus of the component MQTT Service. The manipulation of the argument s leads to buffer overflow. The attack may be initiated remotely. The exploit h...
CVE-2025-7912 TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow
A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748B20211015. This issue affects the function recvSlaveUpgstatus of the component MQTT Service. The manipulation of the argument s leads to buffer overflow. The attack may be initiated remotely. The exploit h...
CVE-2025-7912 TOTOLINK T6 MQTT Service recvSlaveUpgstatus buffer overflow
A vulnerability, which was classified as critical, has been found in TOTOLINK T6 4.1.5cu.748B20211015. This issue affects the function recvSlaveUpgstatus of the component MQTT Service. The manipulation of the argument s leads to buffer overflow. The attack may be initiated remotely. The exploit h...