CVE-2025-3995

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /boafrm/fromStaticDHCP of the component LAN Settings Page. The manipulation of the argument Hostname leads to cross site...

CVE-2025-3995

creationtimestamp| type| source ---|---|--- 2025-04-28 02:10:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13651 2025-04-28 03:45:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lntu45b5xx2y 2025-04-28 05:41:57+00:00| seen|...

CVE-2025-3995 TOTOLINK N150RT LAN Settings Page fromStaticDHCP cross site scripting

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /boafrm/fromStaticDHCP of the component LAN Settings Page. The manipulation of the argument Hostname leads to cross site...

CVE-2025-3995

CVE-2025-3995 affects TOTOLINK N150RT v3.4.0-B20190525. The LAN Settings Page component’s /boafrm/fromStaticDHCP handler accepts the Hostname argument and allows cross-site scripting (XSS). Exploitation is possible remotely and the vulnerability is evidenced across multiple sources (CNVD/CNNVD, R...