PT-2025-26493 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability was found in the HTTP POST Request Handler component of TOTOLINK X15. The issue affects an unknown function of the file /boafrm/formIPv6Addr. The manipulation of...

PT-2025-25576 · Unknown · Codeastro Food Ordering System

Name of the Vulnerable Software and Affected Versions: CodeAstro Food Ordering System version 1.0 Description: A cross-site scripting XSS vulnerability exists due to the manipulation of the Restaurant Name/Address argument within a POST request parameter handler. This affects an unknown function ...

CVE-2025-6129: Buffer Copy without Checking Size of Input

A vulnerability classified as critical was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This vulnerability affects unknown code of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can b...

CVE-2025-6131: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in CodeAstro Food Ordering System 1.0. Affected is an unknown function of the file /admin/store/edit/ of the component POST Request Parameter Handler. The manipulation of the argument Restaurant Name/Address leads to cross site...

CVE-2025-6128: Buffer Copy without Checking Size of Input

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This affects an unknown part of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

PT-2025-25551 · D Link · D-Link Dir-632

Name of the Vulnerable Software and Affected Versions: D-Link DIR-632 version FW103B08 Description: A critical issue has been found in the function get pure content of the component HTTP POST Request Handler. The manipulation of the argument Content-Length leads to a stack-based buffer overflow...

CVE-2025-6130: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This issue affects some unknown processing of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be initiated...

Tenda AC7 Router DoS

The vulnerability of the fromadvsetlanip function /goform/AdvSetLanip of the Tenda AC7 router’s microprogramming software is related to the copying of buffers without checking the size of the input data during the processing of the lanMask parameter. Exploiting this vulnerability could allow an...

Tenda AC9 Router HTTP POST Request Handler Component

The vulnerability of the HTTP POST Request Handler component of the formSetSafeWanWebMan function in the Tenda AC9 router’s microprogramming system is related to buffer overflow in the stack during the processing of the remoteIp parameter. Exploiting this vulnerability allows an attacker to...

TOTOLink T10 Router Data Compromise

The vulnerability of the setWiFiRepeaterCfg function in the TOTOLink T10 router’s microprogramming system arises due to buffer overflow when processing the password parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the...

Tenda AC6 Router FormSetRebootTimer DoS

The vulnerability of the formSetRebootTimer function /goform/SetRebootTimer in the Tenda AC6 router’s microprogrammed software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the rebootTime parameter. Exploiting this vulnerability could allow a...

TOTOLINK X15 Router Web Server Data Compromise

The vulnerability of the built-in web server boa /boafrm/formSaveConfig of the TOTOLINK X15 router’s microprogramming software lies in the copying of buffers without checking the size of input data during the processing of the submit-url parameter. Exploiting this vulnerability allows a malicious...

TOTOLINK X15 Router Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formStats of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the submit-url parameter. Exploiting this vulnerability allows a remote...

TOTOLINK EX1200T Buffer Overflow Vulnerability (CNVD-2025-12751)

The TOTOLINK EX1200T is a wireless router from TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK EX1200T version 4.1.2cu.5232B20210713, which affects the HTTP POST request processing component of file/boafrm/formFilter with unknown code. A remote attacker could exploit this...

TOTOLINK T10 Buffer Overflow Vulnerability (CNVD-2025-12749)

The TOTOLINK T10 is a wireless router manufactured by TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T10 version 4.1.8cu.5207, which affects the function setWiFiMeshName in the /cgi-bin/cstecgi.cgi file of the component's POST request handler.An attacker can exploit the vulnerabilit...

TOTOLINK EX1200T Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formWsc of TOTOLINK EX1200T routers is caused by buffer overflow. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending a specially...

TOTOLINK EX1200T Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formFilter of TOTOLINK EX1200T routers is caused by buffer overflow. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information by sending a specially crafte...

TOTOLINK X15 Router Web Server Buffer Overflow

The vulnerability of the built-in web server boa /boafrm/formWlanRedirect of the TOTOLINK X15 router’s microprogramming software is related to the copying of buffers without checking the size of input data during the processing of the redirect-url parameter. Exploiting this vulnerability allows a...

D-Link DIR-816 Router Command Execution

The vulnerability of the setipsecconfig function /goform/setipsecconfig of the D-Link DIR-816 router’s microprogramming software is related to the failure to take measures to neutralize special elements used in the operating system’s command for processing parameters localIP and remoteIP...

CVE-2025-5912

A vulnerability was found in D-Link DIR-632 FW103B08. It has been declared as critical. This vulnerability affects the function dofile of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been...