Lucene search
+L

1534 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/05 12:00 a.m.•4 views

CVE-2025-0229: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in code-projects Travel Management System 1.0. This issue affects some unknown processing of the file /enquiry.php. The manipulation of the argument pid/t1/t2/t3/t4/t5/t6/t7 leads to sql injection. The attack may be initiated...

9.8CVSS5.5AI score0.00716EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/02/12 12:00 a.m.•19 views

The vulnerability of the /cgi-bin/cstecgi.cgi file, a microprogramming system for the TOTOLink T6 mesh system, allows a perpetrator to increase their privileges.

The vulnerability of the /cgi-bin/cstecgi.cgi file of the mesh-system software TOTOLink T6 is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

6.5CVSS6AI score0.00644EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/02/12 12:00 a.m.•19 views

The vulnerability of the loginAuth function in the /cgi-bin/cstecgi.cgi file of the Totolink NR1800X router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the /cgi-bin/cstecgi.cgi file of the mesh-system software TOTOLink T6 is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

10CVSS8.4AI score0.01499EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/01/15 12:00 a.m.•21 views

The vulnerability in the cstecgi.cgi (/cgi-bin/cstecgi.cgi?action=login&flag=ie8) script of the TOTOLink T6 mesh-system’s software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the cstecgi.cgi /cgi-bin/cstecgi.cgi?action=login&flag=ie8 implementation of the TOTOLink T6 mesh-system’s software is related to the escape of the operation beyond the buffer in memory when processing the parameter v41. Exploiting this vulnerability can allow an attacker to...

10CVSS8AI score0.01518EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
•added 2024/01/12 12:00 a.m.•24 views

Totolink T6 Buffer Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in Totolink T6 version 4.1.9cu.5241B20210923, which originates from the component HTTP POST Request Handler in the file /cgi-bin/cstecgi.cgi that fails to correctly validate t...

10CVSS8.2AI score0.01518EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/01/12 12:00 a.m.•19 views

TOTOLINK T6 Access Control Error Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. An access control error vulnerability exists in TOTOLINK T6 version 4.1.9cu.5241B20210923, which originates from an access control error in the file /cgi-bin/cstecgi.cgi. An attacker could exploit this vulnerabilit...

6.5CVSS6.5AI score0.00644EPSS
SaveExploits1References1
OSV
OSV
•added 2024/01/09 4:15 p.m.•17 views

CVE-2023-7223

A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attac...

6.5CVSS5AI score0.00644EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/09 4:15 p.m.•28 views

Improper access control

A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attac...

5CVSS7AI score0.00644EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/09 3:31 p.m.•8 views

CVE-2023-7223 Totolink T6 cstecgi.cgi access control

A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attac...

5.3CVSS7AI score0.00644EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/09 3:31 p.m.•70 views

CVE-2023-7223

CVE-2023-7223 affects Totolink T6 4.1.9cu.5241_B20210923. The vulnerability lies in /cgi-bin/cstecgi.cgi where manipulating the topicurl argument with input showSyslog causes improper access controls, allowing remote initiation. These details are corroborated across CVE records and vendor-agnosti...

6.5CVSS6.5AI score0.00644EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/09 3:31 p.m.•42 views

CVE-2023-7223 Totolink T6 cstecgi.cgi access control

A vulnerability classified as problematic has been found in Totolink T6 4.1.9cu.5241B20210923. This affects an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input showSyslog leads to improper access controls. It is possible to initiate the attac...

5.3CVSS6.7AI score0.00644EPSS
SaveExploits1References3
OSV
OSV
•added 2024/01/09 2:15 p.m.•16 views

CVE-2023-7221

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

9.8CVSS6.1AI score0.01518EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/09 2:15 p.m.•42 views

CVE-2023-7221

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS9.7AI score0.01518EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/09 2:15 p.m.•34 views

Buffer overflow

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS7.3AI score0.01518EPSS
SaveExploits1References3Affected Software1
Vulnrichment
Vulnrichment
•added 2024/01/09 2:00 p.m.•15 views

CVE-2023-7221 Totolink T6 HTTP POST Request main buffer overflow

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS9.7AI score0.01518EPSS
SaveExploits1References3
CVE
CVE
•added 2024/01/09 2:00 p.m.•104 views

CVE-2023-7221

Totolink T6 (version 4.1.9cu.5241_B20210923) is affected by CVE-2023-7221. A buffer overflow exists in the HTTP POST Request Handler at /cgi-bin/cstecgi.cgi?action=login, triggered by manipulating the v41 argument. The vulnerability can be exploited remotely and has been disclosed publicly. Sever...

10CVSS9.5AI score0.01518EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2024/01/09 2:00 p.m.•58 views

CVE-2023-7221 Totolink T6 HTTP POST Request main buffer overflow

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS9.8AI score0.01518EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/01/09 12:00 a.m.•20 views

Totolink T6 安全漏洞

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in Totolink T6 version 4.1.9cu.5241B20210923, which originates from the component HTTP POST Request Handler in the file /cgi-bin/cstecgi.cgi that fails to correctly validate t...

10CVSS8.1AI score0.01518EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•25 views

PT-2024-1582 · Totolink · Totolink T6

Name of the Vulnerable Software and Affected Versions: Totolink T6 version 4.1.9cu.5241 B20210923 Description: A vulnerability has been found in the Totolink T6, affecting an unknown part of the file /cgi-bin/cstecgi.cgi. The manipulation of the topicurl argument with the input showSyslog leads t...

6.5CVSS5.6AI score0.00644EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/09 12:00 a.m.•5 views

CVE-2023-7221: Buffer Copy without Checking Size of Input

A vulnerability was found in Totolink T6 4.1.9cu.5241B20210923. It has been classified as critical. This affects the function main of the file /cgi-bin/cstecgi.cgi?action=login of the component HTTP POST Request Handler. The manipulation of the argument v41 leads to buffer overflow. It is possibl...

10CVSS8.4AI score0.01518EPSS
SaveExploits1References2
Rows per page
Query Builder