RE11S_1.11-formAccept-CommandInjection

RE11S1.11-formAccept-CommandInjection Qi An Xin Tiangong Lab でのインターンシップ中に、RE11S1.11 ルーターにコマンドインジェクションの脆弱性を発見しました。 bin ディレクトリ内の webs ファイルを解析したところ、関数 formAccept にコマンドインジェクションの脆弱性が含まれていることを発見しました。 このコマンドインジェクションは、submit-url キーの値によってトリガーされ、システムコマンドインジェクションにつながります。 ルーターをシミュレートする方法 firmAE...

EUVD-2025-26344

A vulnerability was found in TOTOLINK A702R 4.0.0-B20211108.1423. This vulnerability affects the function sub4466F8 of the file /boafrm/formOneKeyAccessButton. Performing manipulation of the argument submit-url results in buffer overflow. The attack may be initiated remotely. The exploit has been...

CVE-2026-96892

A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-96892 Edimax BR-6428nC goform websRedirect redirect

A flaw has been found in Edimax BR-6428nC 1.16. The impacted element is the function websRedirect of the component goform Handler. Executing a manipulation of the argument submit-url can lead to open redirect. The attack may be launched remotely. The exploit has been published and may be used...

PT-2026-97697

Name of the Vulnerable Software and Affected Versions Edimax BR-6428nC version 1.16 Description A flaw exists in the websRedirect function of the goform Handler component. A remote attacker can manipulate the submit-url argument to cause an open redirect, which occurs when an application redirect...

CVE-2026-93741

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...

EUVD-2026-83497

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2026-93741

A buffer overflow in the formWlWds function (file /boafrm/formWlWds) of the Totolink A3002MU (firmware Hh-B20211125.1046) allows a remote, unauthenticated attacker to overflow the buffer by manipulating the submit-url argument. The flaw is rated CVSS 10.0 (Critical) with high impact on confidenti...

CVE-2026-93741 Totolink A3002MU formWlWds buffer overflow

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...

CVE-2026-93741 Totolink A3002MU formWlWds buffer overflow

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...

EUVD-2026-83453

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...

EUVD-2026-83448

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed...

CVE-2026-93741: Buffer Copy without Checking Size of Input

A security flaw has been discovered in Totolink A3002MU Hh-B20211125.1046. Affected by this vulnerability is the function formWlWds of the file /boafrm/formWlWds. The manipulation of the argument submit-url results in buffer overflow. It is possible to launch the attack remotely. The exploit has...

PT-2026-95749

Name of the Vulnerable Software and Affected Versions Totolink A3002MU version Hh-B20211125.1046 Description A buffer overflow occurs in the formWlWds function within the /boafrm/formWlWds file. This issue is triggered by the manipulation of the submit-url argument, allowing a remote attacker to...

CVE-2026-93739

A vulnerability was determined in Totolink A3002MU Hh-B20211125.1046. This impacts the function formWlAc of the file /boafrm/formWlAc. Executing a manipulation of the argument submit-url can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed...

CVE-2026-93740

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...

CVE-2026-93740 Totolink A3002MU formWlEncrypt buffer overflow

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...

CVE-2026-93740 Totolink A3002MU formWlEncrypt buffer overflow

A vulnerability was identified in Totolink A3002MU Hh-B20211125.1046. Affected is the function formWlEncrypt of the file /boafrm/formWlEncrypt. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available a...

CVE-2026-93740

CVE-2026-93740 affects the Totolink A3002MU wireless router (firmware Hh-B20211125.1046 ). The vulnerability resides in the formWlEncrypt function within the file /boafrm/formWlEncrypt . Manipulating the submit-url argument triggers a buffer overflow , which can be exploited remotely without auth...

CVE-2026-93739

A buffer overflow in the formWlAc function of the file /boafrm/formWlAc on the Totolink A3002MU router (firmware Hh-B20211125.1046 ) can be triggered remotely by manipulating the submit-url argument. The vulnerability is rated CVSS 3.1: 9.9 CRITICAL (AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) with proo...