Lucene search
+L

836 matches found

CVE
CVE
added 2026/04/27 11:45 a.m.15 views

CVE-2026-7121

Totolink A8000RU 7.1cu.643_b20200521 has a vulnerability in the CGI Handler, specifically the setWizardCfg function in /cgi-bin/cstecgi.cgi. The wizard parameter manipulation leads to os command injection, with remote exploit possibility and an exploit published. The CVE indicates a critical seve...

10CVSS8.2AI score0.01947EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.11 views

PT-2026-35454

A vulnerability has been found in Totolink A8000RU 7.1cu.643 b20200521. Impacted is the function CsteSystem of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument HTTP leads to os command injection. The attack may be performed from remote. The exploit has...

10CVSS5.2AI score0.01766EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.15 views

TOTOLINK A8000RU 命令注入漏洞

TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A8000RU 7.1cu.643b20200521 version contains a command injection vulnerability. This vulnerability stems from the function setWiFiEasyCfg in the CGI Handler component’s file/cgi-bin/cstecgi.cgi, which...

10CVSS7.3AI score0.01766EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.18 views

PT-2026-35520

A vulnerability was identified in Totolink A8000RU 7.1cu.643 b20200521. The affected element is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument telnet enabled leads to os command injection. It is possible to launch the...

10CVSS8.4AI score0.01766EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.15 views

TOTOLINK A8000RU 命令注入漏洞

TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A8000RU 7.1cu.643b20200521 version contains a command injection vulnerability. This vulnerability stems from improper handling of parameters in the setLoginPasswordCfg function within the CGI Handler...

10CVSS7.3AI score0.01766EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.15 views

TOTOLINK A8000RU 命令注入漏洞

The TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a Chinese company. The Totolink A8000RU 7.1cu.643b20200521 version contains a command injection vulnerability. This vulnerability stems from the operation of the setWiFiAclRules function in the CGI Handler component’s...

10CVSS7.3AI score0.01766EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.11 views

PT-2026-35417

A vulnerability was found in Totolink A8000RU 7.1cu.643 b20200521. Affected is the function setIptvCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument setIptvCfg results in os command injection. The attack can be initiated remotely. The...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.19 views

PT-2026-35524

A weakness has been identified in Totolink A8000RU 7.1cu.643 b20200521. This affects the function setAdvancedInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument tty server can lead to os command injection. The attack can be launched...

10CVSS8.3AI score0.01785EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.24 views

PT-2026-35451

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643 b20200521. This affects the function setStorageCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument sambaEnabled leads to os command injection. Remote exploitation of the attack...

10CVSS5.2AI score0.01766EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.20 views

PT-2026-35419

A vulnerability was identified in Totolink A8000RU 7.1cu.643 b20200521. Affected by this issue is the function setWiFiEasyCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument merge leads to os command injection. The attack may be initiated remotely...

10CVSS8.3AI score0.01766EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.14 views

PT-2026-35411

A vulnerability has been found in Totolink A8000RU 7.1cu.643 b20200521. This impacts the function setUPnPCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Such manipulation of the argument enable leads to os command injection. It is possible to launch the attack remotely. The...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.16 views

PT-2026-35418

A vulnerability was determined in Totolink A8000RU 7.1cu.643 b20200521. Affected by this vulnerability is the function setIpv6LanCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Executing a manipulation of the argument addrPrefixLen can lead to os command injection. The attack c...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.15 views

TOTOLINK A8000RU 命令注入漏洞

The TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a Chinese company. The Totolink A8000RU 7.1cu.643b20200521 version has a command injection vulnerability. This vulnerability stems from improper handling of the parameter ttyserver in the setAdvancedInfoShow function within the CGI...

10CVSS7.3AI score0.01785EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.14 views

PT-2026-35571

Name of the Vulnerable Software and Affected Versions Totolink A8000RU version 7.1cu.643 b20200521 Description An OS command injection issue exists in the CGI Handler component. A remote attacker can exploit this by manipulating the wscDisabled argument within the setWiFiWpsStart function of the...

10CVSS7.3AI score0.02448EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.19 views

PT-2026-35452

A vulnerability was detected in Totolink A8000RU 7.1cu.643 b20200521. This vulnerability affects the function setNtpCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument tz results in os command injection. The attack can be executed remotely. The...

10CVSS5.2AI score0.01766EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.19 views

TOTOLINK A8000RU 命令注入漏洞

TOTOLINK A8000RU is a wireless router produced by TOTOLINK, a Chinese company. The TOTOLINK A8000RU 7.1cu.643b20200521 version contains a command injection vulnerability. This vulnerability stems from the function setStorageCfg in the CGI Handler component’s file/cgi-bin/cstecgi.cgi, which...

10CVSS7.3AI score0.01766EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.23 views

PT-2026-35521

A security flaw has been discovered in Totolink A8000RU 7.1cu.643 b20200521. The impacted element is the function setMiniuiHomeInfoShow of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. Performing a manipulation of the argument sys info results in os command injection. The attack can...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.10 views

PT-2026-35525

A security vulnerability has been detected in Totolink A8000RU 7.1cu.643 b20200521. This impacts the function setLoginPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument admpass leads to os command injection. The attack may be initiated...

10CVSS8.2AI score0.01766EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/04/26 11:45 a.m.12 views

EUVD-2026-25713

A security flaw has been discovered in Totolink A8000RU 7.1cu.643b20200521. This issue affects the function setVpnPassCfg of the file /cgi-bin/cstecgi.cgi of the component CGI Handler. The manipulation of the argument pptpPassThru results in os command injection. The attack can be executed...

10CVSS5.2AI score0.01785EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/04/24 1:22 a.m.13 views

CVE-2026-31166

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557B20221024 allowing attackers to execute arbitrary commands via the hour parameter to /cgi-bin/cstecgi.cgi...

6.5CVSS6.1AI score0.00276EPSS
SaveExploits1References1
Rows per page
Query Builder