CVE-2025-5738

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

CVE-2025-5738

creationtimestamp| type| source ---|---|--- 2025-06-06 09:31:41+00:00| published-proof-of-concept| Telegram/mYiFhS0KI41FnuJb80DPaIeUDJlgHATfKqT73V-Gr4Yn1fQ 2025-06-06 10:18:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114635904686208441...

CVE-2025-5738

The CVE-2025-5738 entry concerns TOTOLINK X15 (version 1.0.0-B20230714.1105). Vulnerable component: HTTP POST Request Handler, specifically the /boafrm/formStats endpoint. The issue arises from improper validation of the submit-url parameter, leading to a buffer overflow. This can be triggered re...