590 matches found
CVE-2026-1723
CVE-2026-1723 concerns TOTOLINK X6000R where improper neutralization of special elements leads to an OS command injection. The issue is described as affecting X6000R firmware through version V9.4.0cu.1498_B20250826, with network-based attack vector and no user interaction required, per the connec...
EUVD-2026-5005
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498B20250826...
CVE-2026-1723 TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498B20250826...
CVE-2026-1723 TOTOLINK X6000R Unauthenticated Command Injection Vulnerability
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498B20250826...
PT-2026-5443
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1498 B20250826...
TOTOLINK X6000R security vulnerabilities
TOTOLINK X6000R is a wireless router produced by TOTOLINK, a Chinese company. Versions of TOTOLINK X6000R such as V9.4.0cu.1498B20250826 and earlier contained security vulnerabilities. These vulnerabilities were caused by improper neutralization of special elements, which could lead to OS command...
CVE-2023-43453
An issue in TOTOLINK X6000R V9.4.0cu.652B20230116 and V9.4.0cu.852B20230719 allows a remote attacker to execute arbitrary code via the IP parameter of the setDiagnosisCfg component...
CVE-2024-2353
A vulnerability, which was classified as critical, has been found in Totolink X6000R 9.4.0cu.85220230719. This issue affects the function setDiagnosisCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation of the argument ip leads to os command injection. The attack may be...
VulnCheck KEV: CVE-2024-1781
A vulnerability was found in Totolink X6000R AX3000 9.4.0cu.85220230719. It has been rated as critical. This issue affects the function setWizardCfg of the file /cgi-bin/cstecgi.cgi of the component shttpd. The manipulation leads to command injection. The exploit has been disclosed to the public...
EUVD-2023-50631
Malicious code in bioql PyPI...
EUVD-2023-52830
Malicious code in bioql PyPI...
EUVD-2025-31021
Malicious code in bioql PyPI...
EUVD-2023-50638
Malicious code in bioql PyPI...
EUVD-2023-52837
Malicious code in bioql PyPI...
EUVD-2023-50642
Malicious code in bioql PyPI...
EUVD-2024-17396
Malicious code in bioql PyPI...
EUVD-2024-46036
Malicious code in bioql PyPI...
EUVD-2023-52835
Malicious code in bioql PyPI...