TOTOLINK downloadFile.cgi RCE

The vulnerability in the downloadFile.cgi subroutine of the TOTOLINK A830R, TOTOLINK A950RG, TOTOLINK A3000RU, and TOTOLINK A3100R routers stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to compromise the...

EUVD-2025-12212

Malicious code in bioql PyPI...

CVE-2025-28018

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v14 parameter...

CVE-2025-28028

TOTOLINK A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a buffer overflow vulnerability in downloadFile.cgi through the v5 parameter...

CVE-2025-28019

The TOTOLINK A800R wireless router (version V4.1.2cu.5137_B20200730 ) contains a buffer overflow vulnerability in the downloadFile.cgi component. The root cause is the copying of buffers without validating the size of the input data. Remote attackers can exploit this issue to execute arbitrary co...