CVE-2025-9533

TOTOLINK T10 v4.1.8cu.5241_B20210927 contains an improper authentication vulnerability in the /formLoginAuth.htm file. The issue arises from manipulating the authCode parameter (e.g., input 1) to bypass authentication. The vulnerability is exploitable remotely and has public disclosure. Connected...

CVE-2024-10654 TOTOLINK LR350 formLoginAuth.htm authorization

A vulnerability has been found in TOTOLINK LR350 up to 9.3.5u.6369 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /formLoginAuth.htm. The manipulation of the argument authCode with the input 1 leads to authorization bypass. The attack can be...