EUVD-2026-52167

A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENTLENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component...

CVE-2026-18588: Stack-based Buffer Overflow

A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the file nas.cgi. The manipulation of the argument CONTENTLENGTH leads to stack-based buffer overflow. Remote exploitation of the attack is possible. You should upgrade the affected component...

CVE-2025-67445: Uncontrolled Resource Consumption

TOTOLINK X5000R V9.1.0cu.2415B20250515 contains a denial-of-service vulnerability in /cgi-bin/cstecgi.cgi. The CGI reads the CONTENTLENGTH environment variable and allocates memory using malloc CONTENTLENGTH + 1 without sufficient bounds checking. When lighttpd s request size limit is not enforce...

EUVD-2025-19717

Malicious code in bioql PyPI...

CVE-2025-45029

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2025-45029

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2025-45029

The WINSTAR WN572HP3 Wi-Fi signal booster (version v230525 ) is vulnerable to a heap overflow within the dynamic memory of the CONTENT_LENGTH component at the /cgi-bin/upload.cgi API endpoint. Exploitation of this flaw could allow a remote attacker to execute arbitrary code . To mitigate this ris...

CVE-2025-45029

WINSTAR WN572HP3 v230525 was discovered to contain a heap overflow via the CONTENTLENGTH variable at /cgi-bin/upload.cgi...

CVE-2022-29377

Totolink A3600R V4.1.2cu.5182B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via the parameter CONTENTLENGTH...

Design/Logic Flaw

Totolink A3600R V4.1.2cu.5182B20201102 was discovered to contain a stacker overflow in the fread function at infostat.cgi. This vulnerability allows attackers to cause a Denial of Service DoS via the parameter CONTENTLENGTH...

CVE-2022-29377

CVE-2022-29377 affects Totolink A3600R router firmware version V4.1.2cu.5182_B20201102. The vulnerability is a stack overflow in the fread function of infostat.cgi, caused by improper handling of CONTENT_LENGTH, which can be exploited to trigger a Denial of Service (DoS). The available documents ...