TOTOLINK X18 setOpModeCfg function injection vulnerability

TOTOLINK X18 is an AX1800-grade Wi-Fi6 Mesh router system launched by TOTOLINK of China. The TOTOLINK X18 has a command injection vulnerability, which stems from the fact that the host name parameter in the setOpModeCfg function fails to properly filter special characters and commands. Attackers...

XSS Vulnerability in Wi-Fi6 Router of Sichuan Tianyi Kanghe Communication Co.

Based on the optical communication industry and mobile communication industry, Sichuan Tianyi Kanghe Communication Co., Ltd. has long been committed to the research and development, production, sales and service of communication equipment related products, specializing in the research and...