CVE-2026-105286

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

EUVD-2026-92385

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

CVE-2026-105286 Totolink A3002MU File Upload formUploadFile sub_44B250 path traversal

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

CVE-2026-105286

A path traversal vulnerability exists in the File Upload Handler component of the Totolink A3002MU (version 1.0.0-B20230403.1455). The flaw is located in the sub_44B250 function within the /boafrm/formUploadFile file, where improper validation of the filename argument allows for remote execution ...

PT-2026-104793

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub 44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploi...

EUVD-2024-20066

Malicious code in bioql PyPI...

CVE-2024-22529

TOTOLINK X2000RV2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub449040 handle function of formUploadFile of /bin/boa...

CVE-2024-22529

TOTOLINK X2000RV2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub449040 handle function of formUploadFile of /bin/boa...

Command injection

TOTOLINK X2000RV2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub449040 handle function of formUploadFile of /bin/boa...

CVE-2024-22529

TOTOLINK X2000RV2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub449040 handle function of formUploadFile of /bin/boa...

PT-2024-19470

Name of the Vulnerable Software and Affected Versions TOTOLINK X2000R V2 version V2.0.0-B20230727.10434 Description The issue is a command injection vulnerability in the sub 449040, which is the handle function of formUploadFile, located in /bin/boa. This vulnerability can be exploited through th...

CVE-2024-22529: Improper Neutralization of Special Elements used in a Command

TOTOLINK X2000RV2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub449040 handle function of formUploadFile of /bin/boa...

CVE-2024-22529

TOTOLINK X2000RV2 V2.0.0-B20230727.10434 has a command injection vulnerability in the sub449040 handle function of formUploadFile of /bin/boa...