Lucene search
+L

82 matches found

attackerkb
attackerkb
•added 2026/04/06 6:45 p.m.•9 views

CVE-2026-5678

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument mode can lead to os command injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7AI score0.0206EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2026/04/06 6:45 p.m.•55 views

CVE-2026-5678 Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument mode can lead to os command injection. The attack may be launched remotely. The exploit has been...

7.5CVSS0.0206EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/04/06 6:45 p.m.•7 views

CVE-2026-5678 Totolink A7100RU cstecgi.cgi setScheduleCfg os command injection

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument mode can lead to os command injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7AI score0.0206EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/06 12:00 a.m.•5 views

CVE-2026-5678: Improper Neutralization of Special Elements used in an OS Command

A weakness has been identified in Totolink A7100RU 7.4cu.2313b20191024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi. Executing a manipulation of the argument mode can lead to os command injection. The attack may be launched remotely. The exploit has been...

7.5CVSS7AI score0.0206EPSS
SaveExploits0References3
CNVD
CNVD
•added 2025/10/31 12:00 a.m.•15 views

TOTOLINK A3300R setScheduleCfg function stack buffer overflow vulnerability

TOTOLINK A3300R is a dual-band wireless router manufactured by China's Gion Electronics TOTOLINK, mainly used for home and small network environments. The TOTOLINK A3300R suffers from a stack buffer overflow vulnerability that originates from the parameter recHour of the setScheduleCfg function o...

9CVSS9.1AI score0.01024EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/10/28 10:52 a.m.•13 views

CVE-2025-12259

A flaw has been found in TOTOLINK A3300R 17.0.0cu.557B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour causes stack-based buffer overflow. It is possible to initiate th...

9CVSS6.9AI score0.01024EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2025/10/28 12:00 a.m.•22 views

The vulnerability of the setScheduleCfg() function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the setScheduleCfg function in the cgi-bin/cstecgi.cgi script of the TOTOLINK A3300R router’s microprogramming system is related to the escape of the operation outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

9CVSS7.4AI score0.01024EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2025/10/27 10:15 a.m.•15 views

CVE-2025-12259

A flaw has been found in TOTOLINK A3300R 17.0.0cu.557B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour causes stack-based buffer overflow. It is possible to initiate th...

9CVSS0.01024EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/10/27 10:02 a.m.•19 views

EUVD-2025-36155

A flaw has been found in TOTOLINK A3300R 17.0.0cu.557B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour causes stack-based buffer overflow. It is possible to initiate th...

9CVSS6.6AI score0.01024EPSS
SaveExploits1References6
CVE
CVE
•added 2025/10/27 10:02 a.m.•57 views

CVE-2025-12259

TOTOLINK A3300R (v17.0.0cu.557_B20221024) is affected by a stack-based buffer overflow in the setScheduleCfg function, located in /cgi-bin/cstecgi.cgi (POST Parameter Handler). The vulnerability stems from improper validation of the recHour input, enabling remote exploitation. An exploit has been...

9CVSS8.1AI score0.01024EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•3 views

CVE-2025-12259: Stack-based Buffer Overflow

A flaw has been found in TOTOLINK A3300R 17.0.0cu.557B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour causes stack-based buffer overflow. It is possible to initiate th...

9CVSS6AI score0.01024EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/10/12 12:00 a.m.•24 views

PT-2025-43920

Name of the Vulnerable Software and Affected Versions TOTOLINK A3300R version 17.0.0cu.557 B20221024 Description A flaw exists in TOTOLINK A3300R. The issue is a stack-based buffer overflow caused by the manipulation of the recHour argument within the setScheduleCfg function located in the...

9CVSS7.8AI score0.01024EPSS
SaveExploits1References12
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-53484

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.01742EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-20586

Malicious code in bioql PyPI...

9.8CVSS9.4AI score0.01728EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-53485

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.01604EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-53488

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01604EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-53487

Malicious code in bioql PyPI...

9.8CVSS9.1AI score0.01217EPSS
SaveExploits1References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2024-53486

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.01604EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 9:39 a.m.•20 views

CVE-2024-23061

TOTOLINK A3300R V17.0.0cu.557B20221024 was discovered to contain a command injection vulnerability via the minute parameter in the setScheduleCfg function...

9.8CVSS8AI score0.01728EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/23 7:29 a.m.•21 views

CVE-2024-57014

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "recHour" parameter in setScheduleCfg...

8.8CVSS8AI score0.01217EPSS
SaveExploits1References1
Rows per page
Query Builder