CVE-2025-34319 TOTOLINK N300RT <= V2.1.8-B20201030.1539 Boa formWsc RCE

TOTOLINK N300RT wireless router firmware versions prior to V3.4.0-B20250430 discovered in V2.1.8-B20201030.1539 contain an OS command injection vulnerability in the Boa formWsc handling functionality. An unauthenticated attacker can send specially crafted requests to trigger command execution via...

EUVD-2018-4668

Malware in sbrugna...

EUVD-2025-28714

Malicious code in bioql PyPI...

TOTOLINK N150RT Router Web Server Command Execution

The vulnerability of the built-in web server boa /boa/formWSC of TOTOLINK N150RT routers is related to the failure to take measures to neutralize special elements used in the operating system’s commands when processing the targetAPSsid parameter. Exploiting this vulnerability allows a remote...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

Design/Logic Flaw

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

CVE-2018-12715

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

CVE-2018-12715: Improper Neutralization of Input During Web Page Generation

DIGISOL DG-HR3400 devices have XSS via a modified SSID when the apssid value is unchanged...

PT-2019-8918

Name of the Vulnerable Software and Affected Versions DIGISOL DG-HR3400 affected versions not specified Description The issue concerns a problem where a modified SSID can lead to XSS when the apssid value remains unchanged. Recommendations At the moment, there is no information about a newer...