CVE-2026-2885

The CVE affects D-Link DWR-M960 (version 1.01.07). The vulnerability is a stack-based buffer overflow in the function sub_469104 within /boafrm/formIpv6Setup, triggered by manipulating the submit-url argument. Exploitation can be performed remotely, and public exploits exist. CVSS data indicate h...

CVE-2025-6568

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is an unknown function of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2025-6402

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formIpv6Setup of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack...

CVE-2025-45867

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow via the staticdns1 parameter in the formIpv6Setup interface...

CVE-2025-25610

CVE-2025-25610 affects the TOTOLINK A3002R router (version V1.1.1-B20200824.0128). The flaw stems from improper input validation of the static_gw parameter in the formIpv6Setup interface of /bin/boa, leading to a buffer overflow. Public sources indicate potential for arbitrary code execution or d...

CVE-2025-25609

TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the staticipv6 parameter in the formIpv6Setup interface of /bin/boa...

CVE-2023-46541

TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIpv6Setup...

TOTOLINK X2000R 缓冲区错误漏洞

TOTOLINK X2000R Gh is a Wi-Fi6 router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a stack buffer overflow vulnerability that stems from the formIpv6Setup method failing to properly validate the length size of the input data, which can be exploited by an attacker to...