Lucene search
K

260 matches found

CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

TOTOLINK A3002RU Virtual Server Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the Virtual Server Page component parameter servicetype...

4.8CVSS6.4AI score0.00351EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

TOTOLINK A3002RU IP Port Filtering Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the IP Port Filtering Page component parameter Comment,...

4.8CVSS6.4AI score0.00351EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

TOTOLINK A3002RU NAT Mapping Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. The TOTOLINK A3002RU suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the NAT Mapping Page component parameter Comment, for...

5.4CVSS6.6AI score0.00132EPSS
Exploits1References1
CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

TOTOLINK A3002RU MAC Filtering Page Component Cross-Site Scripting Vulnerability

TOTOLINK A3002RU is a wireless router product from China's Gion Electronics TOTOLINK. A cross-site scripting vulnerability exists in the TOTOLINK A3002RU, which stems from the lack of effective filtering and escaping of user-supplied data by the MAC Filtering Page component parameter Comment, for...

5.4CVSS6.6AI score0.00132EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2025/06/09 12:0 a.m.1 views

PT-2025-25600 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical issue affects the HTTP POST Request Handler component due to a buffer overflow when processing the file /boafrm/formSysLog. The manipulation of the submit-url argument lead...

9CVSS8.9AI score0.01357EPSS
Exploits1References13
RedhatCVE
RedhatCVE
added 2025/06/05 4:12 p.m.11 views

CVE-2025-5508

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched...

4.8CVSS6AI score0.00351EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/06/05 4:12 p.m.10 views

CVE-2025-5507

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack can be launch...

5.4CVSS6AI score0.00132EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/06/05 3:26 p.m.7 views

CVE-2025-5506

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been classified as problematic. Affected is an unknown function of the component NAT Mapping Page. The manipulation of the argument Comment leads to cross site scripting. It is possible to launch the attack remotely. The...

5.4CVSS6AI score0.00132EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/06/05 3:26 p.m.7 views

CVE-2025-5505

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument servicetype leads to cross site scripting. The attack...

4.8CVSS6AI score0.00351EPSS
Exploits1References1
NVD
NVD
added 2025/06/03 4:15 p.m.9 views

CVE-2025-5508

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched...

4.8CVSS0.00351EPSS
Exploits1References5
OSV
OSV
added 2025/06/03 4:15 p.m.0 views

CVE-2025-5507

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack can be launch...

5.4CVSS3.5AI score
Exploits0References5
NVD
NVD
added 2025/06/03 4:15 p.m.7 views

CVE-2025-5507

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack can be launch...

5.4CVSS0.00132EPSS
Exploits1References5
OSV
OSV
added 2025/06/03 4:15 p.m.0 views

CVE-2025-5508

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched...

3.4CVSS3.5AI score0.00351EPSS
Exploits1References5
CVE
CVE
added 2025/06/03 4:0 p.m.49 views

CVE-2025-5508

CVE-2025-5508 concerns TOTOLINK A3002RU firmware 2.1.1-B20230720.1011. The issue is in the IP Port Filtering Page, where the Comment parameter may be manipulated to trigger cross-site scripting. Exploitation appears remotely feasible, and public disclosures exist. The vendor reportedly did not re...

4.8CVSS6AI score0.00351EPSS
Exploits1References5Affected Software1
Cvelist
Cvelist
added 2025/06/03 4:0 p.m.13 views

CVE-2025-5508 TOTOLINK A3002RU IP Port Filtering Page cross site scripting

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched...

4.8CVSS0.00351EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/03 4:0 p.m.5 views

CVE-2025-5508 TOTOLINK A3002RU IP Port Filtering Page cross site scripting

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been rated as problematic. Affected by this issue is some unknown functionality of the component IP Port Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched...

4.8CVSS6AI score0.00351EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/06/03 3:31 p.m.10 views

CVE-2025-5507 TOTOLINK A3002RU MAC Filtering Page cross site scripting

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack can be launch...

4.8CVSS0.00132EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/06/03 3:31 p.m.7 views

CVE-2025-5507 TOTOLINK A3002RU MAC Filtering Page cross site scripting

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack can be launch...

4.8CVSS3.6AI score0.00132EPSS
Exploits1References5
CVE
CVE
added 2025/06/03 3:31 p.m.48 views

CVE-2025-5507

The TOTOLINK A3002RU vulnerability (CVE-2025-5507) affects the MAC Filtering Page in firmware 2.1.1-B20230720.1011, where manipulating the Comment parameter triggers cross-site scripting. Exploitation is possible remotely and has been publicly disclosed. Mitigation per PT-Security guidance: restr...

5.4CVSS3.3AI score0.00132EPSS
Exploits1References5Affected Software1
NVD
NVD
added 2025/06/03 3:16 p.m.7 views

CVE-2025-5505

A vulnerability was found in TOTOLINK A3002RU 2.1.1-B20230720.1011 and classified as problematic. This issue affects some unknown processing of the file /boafrm/formPortFw of the component Virtual Server Page. The manipulation of the argument servicetype leads to cross site scripting. The attack...

4.8CVSS0.00351EPSS
Exploits1References5
Rows per page
Query Builder