EUVD-2021-30548

Malicious code in bioql PyPI...

CVE-2021-43636

Two Buffer Overflow vulnerabilities exists in T10 V2Firmware V4.1.8cu.5207B20210320 in the httprequestparse function when processing host data in the HTTP request process...

PT-2023-27233 · Totolink · Totolink T10 V2

Name of the Vulnerable Software and Affected Versions: TOTOLINK T10 v2 version 5.9c.5061 B20200511 Description: The issue is a stack-based buffer overflow in the setStaticDhcpConfig function located in /lib/cste modules/lan.so. Attackers can exploit this by sending crafted data in an MQTT packet,...

PT-2022-11877

Name of the Vulnerable Software and Affected Versions T10 V2 Firmware version 4.1.8cu.5207 B20210320 Description A buffer overflow issue exists in the http request parse function when processing host data in the HTTP request process. Recommendations For version 4.1.8cu.5207 B20210320, consider...

CVE-2022-25130

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3Firmware T6V3V4.1.5cu.748B20211015 and T10 V2Firmware V4.1.8cu.5207B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet...

CVE-2022-25130

A command injection vulnerability in the function updateWifiInfo of TOTOLINK Technology routers T6 V3Firmware T6V3V4.1.5cu.748B20211015 and T10 V2Firmware V4.1.8cu.5207B20210320 allows attackers to execute arbitrary commands via a crafted MQTT packet...

PT-2022-17088

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the recvSlaveCloudCheckStatus function of TOTOLINK Technology...

PT-2022-17094

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the recvSlaveUpgstatus function of TOTOLINK Technology routers...

PT-2022-17093

Name of the Vulnerable Software and Affected Versions TOTOLINK Technology T6 V3 Firmware version T6 V3 V4.1.5cu.748 B20211015 TOTOLINK Technology T10 V2 Firmware version V4.1.8cu.5207 B20210320 Description A command injection issue in the meshSlaveUpdate function of TOTOLINK Technology routers...