CVE-2022-37840

In TOTOLINK A860R V4.1.2cu.5182B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability...

EUVD-2025-12090

Malicious code in bioql PyPI...

EUVD-2025-12100

Malicious code in bioql PyPI...

EUVD-2025-12092

Malicious code in bioql PyPI...

EUVD-2025-12212

Malicious code in bioql PyPI...

EUVD-2025-8648

Malicious code in bioql PyPI...

EUVD-2025-12101

Malicious code in bioql PyPI...

EUVD-2025-12091

Malicious code in bioql PyPI...

EUVD-2025-12093

Malicious code in bioql PyPI...

EUVD-2022-41091

Malicious code in bioql PyPI...

EUVD-2022-40449

Malicious code in bioql PyPI...

The vulnerability in the downloadFile.cgi script of the TOTOLINK A800R router’s microprogramming software allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A800R router’s microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibilit...

The vulnerability of the downloadFile.cgi function in the microprogramming software for the Totolink-A800R router allows a hacker to execute arbitrary code.

The vulnerability of the downloadFile.cgi function in the Totolink-A800R router microprogramming system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-40475

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi...

TOTOLINK A800R Command Injection Vulnerability (CNVD-2025-09933)

TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK A800R suffers from a command injection vulnerability that stems from the QUERYSTRING parameter in downloadFile.cgi failing to correctly filter constructed command special characters, commands, and so on. No...

TOTOLINK A800R downloadFile.cgi Component Buffer Overflow Vulnerability

TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK A800R version V4.1.2cu.5137B20200730, which stems from a security issue in the downloadFile.cgi component, and can be exploited by remote attackers to execute arbitrary...

CVE-2025-28022

TOTOLINK A810R V4.1.2cu.5182B20201026 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

CVE-2025-28026

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi...

CVE-2025-28017

TOTOLINK A800R V4.1.2cu.5032B20200408 is vulnerable to Command Injection in downloadFile.cgi via the QUERYSTRING parameter...

CVE-2025-28019

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in the downloadFile.cgi component...