15 matches found
CVE-2026-8344
A weakness has been identified in D-Link DIR-816 1.10CNB05R1B011D88210. Affected by this vulnerability is the function sub445E7C of the file /goform/formDMZ.cgi. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has been made available to the...
EUVD-2023-50770
Malicious code in bioql PyPI...
CVE-2025-5911: Buffer Copy without Checking Size of Input
A vulnerability was found in TOTOLINK EX1200T up to 4.1.2cu.5232B20210713 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. The attack may be launched...
CVE-2025-5786: Buffer Copy without Checking Size of Input
A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launc...
CVE-2023-46564
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...
The vulnerability in the formDMZ.cgi script of the D-Link DIR-816A router’s software allows a attacker to execute arbitrary code.
The vulnerability of the formDMZ.cgi script in the D-Link DIR-816A2 router’s microprogramming software is related to the incorrect use of standard permissions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially created HTTP POST request...
TOTOLINK X2000R Gh formDMZ Method Buffer Overflow Vulnerability
The TOTOLINK X2000R Gh is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formDMZ method failing to properly validate the length and size of input data, which can be exploited by an attacker to execu...
CVE-2023-46564
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...
CVE-2023-46564
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...
Stack overflow
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...
CVE-2023-46564
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDMZ...
PT-2023-30093 · Totolink · Totolink X2000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web Description: A stack overflow issue was discovered via the function formDMZ. Recommendations: For TOTOLINK X2000R Gh version 1.0.0-B20230221.0948.web, as a temporary workaround, consider...
CVE-2023-46564
TOTOLINK X2000R Gh (v1.0.0-B20230221.0948.web) is affected by a stack overflow in the formDMZ() function. Exploitation could allow arbitrary code execution or cause a denial of service, as described in CNVD/CNNVD entries. A patch/fixed version is not disclosed in the provided documents; as a temp...
TOTOLINK X2000R 缓冲区错误漏洞
The TOTOLINK X2000R Gh is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R Gh suffers from a buffer overflow vulnerability that stems from the formDMZ method failing to properly validate the length and size of input data, which can be exploited by an attacker to execu...