Lucene search
+L

15560 matches found

CNVD
CNVD
•added 2025/09/26 12:00 a.m.•19 views

TOTOLINK X6000R Improper Input Validation Vulnerability

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an improper input validation vulnerability that originates from the program's failure to...

8.8CVSS7.4AI score0.00854EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/09/25 9:15 p.m.•17 views

CVE-2025-11005

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...

9.8CVSS5.8AI score0.01298EPSS
SaveExploits0References2
NVD
NVD
•added 2025/09/25 9:15 p.m.•20 views

CVE-2025-11005

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...

9.8CVSS0.01298EPSS
SaveExploits0References2
CVE
CVE
•added 2025/09/25 8:17 p.m.•65 views

CVE-2025-11005

The CVE-2025-11005 issue affects TOTOLINK X6000R, where OS Command Injection arises from improper neutralization of special elements in user input. Affected versions: X6000R up to and including V9.4.0cu.1458_B20250708. Root cause: failure to properly filter special elements allows an attacker to ...

9.8CVSS8.1AI score0.01298EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/25 8:17 p.m.•10 views

CVE-2025-11005 TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...

9.3CVSS8.1AI score0.01298EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/25 8:17 p.m.•42 views

CVE-2025-11005 TOTOLINK X6000R Unauthenticated Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...

9.3CVSS0.01298EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/25 6:55 p.m.•15 views

CVE-2025-52907

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7.3CVSS7AI score0.00854EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/09/25 6:15 p.m.•10 views

CVE-2025-57623

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866B2022506 allows attackers to cause a Denial of Service...

5.3CVSS5.8AI score0.00385EPSS
SaveExploits1References2
NVD
NVD
•added 2025/09/25 6:15 p.m.•18 views

CVE-2025-57623

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866B2022506 allows attackers to cause a Denial of Service...

5.3CVSS0.00385EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/09/25 5:47 p.m.•20 views

CVE-2025-52906

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

9.3CVSS7AI score0.13463EPSS
SaveExploits0References1
GithubExploit
GithubExploit
•added 2025/09/25 12:50 p.m.•19 views

cve

CVE Security vulnerability disclosures. | Product | Advisory...

7.1CVSS6.9AI score0.00655EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2025/09/25 2:53 a.m.•13 views

CVE-2025-52905

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7CVSS6.9AI score0.08445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•16 views

PT-2025-39434

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R firmware version 4.3.0cu.7866 B2022506 Description A NULL pointer dereference exists in the TOTOLINK N600R firmware. This issue can be exploited by attackers to cause a Denial of Service. A NULL pointer dereference occurs when a...

5.3CVSS6.6AI score0.00385EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/25 12:00 a.m.•6 views

CVE-2025-11005: Improper Neutralization of Special Elements used in an OS Command

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1458B20250708...

9.8CVSS8.1AI score0.01298EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/25 12:00 a.m.•6 views

CVE-2025-57623: NULL Pointer Dereference

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866B2022506 allows attackers to cause a Denial of Service...

5.3CVSS5.8AI score0.00385EPSS
SaveExploits1References1
CNVD
CNVD
•added 2025/09/25 12:00 a.m.•23 views

TOTOLINK X6000R Improper Input Validation Vulnerability

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from an improper input validation vulnerability, which can be exploited by...

7.5CVSS6.8AI score0.08445EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/25 12:00 a.m.•17 views

PT-2025-39450

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1458 B20250708 Description A flaw exists in TOTOLINK X6000R that allows for OS Command Injection due to improper neutralization of special elements used in an OS command. This could allow an attacker t...

9.8CVSS8.4AI score0.01298EPSS
SaveExploits0References9
CNNVD
CNNVD
•added 2025/09/25 12:00 a.m.•18 views

TOTOLINK X6000R security vulnerabilities

The TOTOLINK X6000R is a wireless router from TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK X6000R V9.4.0cu.1458B20250708 and prior versions, which stems from a failure to properly filter special elements in user input. An attacker can exploit this vulnerability...

9.8CVSS8AI score0.01298EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/09/25 12:00 a.m.•18 views

TOTOLINK N600R security vulnerabilities

The TOTOLINK N600R is a dual-band wireless router launched by Korean brand TOTOLINK in 2013, supporting concurrent operation in the 2.4GHz and 5GHz bands with a maximum wireless transmission rate of 300Mbps. The TOTOLINK N600R suffers from a null pointer dereference vulnerability that can be...

5.3CVSS6.6AI score0.00385EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/09/25 12:00 a.m.•4 views

CVE-2025-57623

A NULL pointer dereference in TOTOLINK N600R firmware v4.3.0cu.7866B2022506 allows attackers to cause a Denial of Service...

5.8AI score0.00385EPSS
SaveExploits1References2
Rows per page
Query Builder