156 matches found
CVE-2026-1150
Totolink LR350 9.3.5u.6369_B20220309 is affected. The vulnerability resides in the POST Request Handler’s setTracerouteCfg function in /cgi-bin/cstecgi.cgi, where manipulating the command argument leads to remote command injection. The exploit has been released publicly, enabling remote execution...
CVE-2026-1150 Totolink LR350 POST Request cstecgi.cgi setTracerouteCfg command injection
A security flaw has been discovered in Totolink LR350 9.3.5u.6369B20220309. Impacted is the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument command results in command injection. The attack can be launched remotely...
CVE-2022-38535
TOTOLINK-720R v4.1.5cu.374 was discovered to contain a remote code execution RCE vulnerability via the setTracerouteCfg function...
EUVD-2023-33336
Malicious code in bioql PyPI...
EUVD-2023-52272
Malicious code in bioql PyPI...
EUVD-2022-47207
Malicious code in bioql PyPI...
EUVD-2022-39167
Malicious code in bioql PyPI...
EUVD-2024-48923
Malicious code in bioql PyPI...
EUVD-2022-39196
Malicious code in bioql PyPI...
EUVD-2022-41114
Malicious code in bioql PyPI...
EUVD-2022-44716
Malicious code in bioql PyPI...
EUVD-2023-50699
Malicious code in bioql PyPI...
EUVD-2022-39189
Malicious code in bioql PyPI...
EUVD-2023-43327
Malicious code in bioql PyPI...
TOTOLINK T6 setTracerouteCfg function Command Injection Vulnerability
TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that originates from the failure of the parameter command of the function setTracerouteCfg in the fi...
The vulnerability of the setTracerouteCfg() function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software allows a intruder to execute arbitrary code.
The vulnerability of the setTracerouteCfg function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software is related to the failure to eliminate special elements during the processing of the command parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
TOTOLINK T6 注入漏洞
TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a command injection vulnerability that originates from the failure of the parameter command of the function setTracerouteCfg in the fi...
VulnCheck KEV: CVE-2024-9001
A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been declared as critical. This vulnerability affects the function setTracerouteCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument command leads to os command injection. The attack can be initiated remotely. The...