CVE-2025-5902

creationtimestamp| type| source ---|---|--- 2025-06-09 23:32:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17807 2025-06-10 01:43:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr7re226js2k...

CVE-2025-5902

The CVE-2025-5902 entry concerns TOTOLINK T10 firmware version 4.1.8cu.5207. The vulnerability lies in the POST Request Handler’s setUpgradeFW function, specifically in processing the slaveIpList parameter in /cgi-bin/cstecgi.cgi, where a buffer overflow can be triggered. Publicly disclosed explo...