EUVD-2022-39728

Malicious code in bioql PyPI...

EUVD-2022-29989

Malicious code in bioql PyPI...

EUVD-2022-44719

Malicious code in bioql PyPI...

EUVD-2023-47869

Malicious code in bioql PyPI...

CVE-2025-11121

CVE-2025-11121 is a command-injection vulnerability in the Tenda AC18 (firmware 15.03.05.19) related to the function in the file /goform/AdvSetLanip where the argument lanIp is mishandled. The attack is remote and the exploit has been publicly disclosed. The impact is described as high (per CVSS ...

PT-2025-39792

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description A security issue exists in Tenda AC18 version 15.03.05.19. The issue involves command injection through manipulation of the lanIp argument in the file /goform/AdvSetLanip. This can be initiated...

CVE-2025-57061

Tenda G3 v3.0brV15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57061

Tenda G3 v3.0brV15.11.0.17 was discovered to contain multiple stack overflows in the formIPMacBindModify function via the ruleId, ip, mac, v6 and remark parameters. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-9387

A vulnerability was found in DCN DCME-720 9.1.5.11. This affects an unknown function of the file /usr/local/www/function/audit/newstatistics/ipblock.php of the component Web Management Backend. Performing manipulation of the argument ip results in os command injection. It is possible to initiate...

CVE-2025-55588

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fwip parameter at /boafrm/formPortFw. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

The vulnerability of the tcpcheck_net function in the microprogramming software of the TOTOLink T6 system allows a intruder to execute arbitrary code.

The vulnerability of the tcpchecknet function in the microprogramming software of the TOTOLink T6 mesh system arises from the lack of measures taken at the control level during the processing of the domain parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by...

TOTOLINK A3002R 安全漏洞

The TOTOLINK A3002R is a wireless router manufactured by China's Gion Electronics TOTOLINK, whose main function is to provide wireless network connectivity for home or small office environments. A buffer overflow vulnerability exists in the TOTOLINK A3002R. The vulnerability stems from the fwip...

Linksys多款产品 命令注入漏洞

The Linksys RE6250, among others, is a wireless extender from Linksys USA. A command injection vulnerability exists in various Linksys products. The vulnerability stems from improper manipulation of the staticIp and staticNetmask parameters by the RPsetBasicAuto function, which may result in os...

CVE-2025-8819

A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. This affects the function setWan of the file /goform/setWan. The manipulation of the argument staticIp leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...

CVE-2013-10039

A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ipcheckhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication may be required depending on deploymen...

CVE-2013-10039: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ipcheckhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication may be required depending on deploymen...

PT-2025-31563 · D Link · Di 8200

Name of the Vulnerable Software and Affected Versions: D-LINK DI-8200 version 16.07.26A1 Description: The D-LINK DI-8200 version 16.07.26A1 is susceptible to a buffer overflow issue within the ipsec net asp function. The vulnerability is triggered through the remot ip parameter. Recommendations: ...

TOTOLINK T6 serverIp Parameter Buffer Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in TOTOLINK T6 version 4.1.5cu.748B20211015, which stems from the failure of the parameter serverIp in the MQTT Service to correctly validate the length and size of the input...

TOTOLINK T6 Buffer Overflow Vulnerability

TOTOLINK T6 is a wireless dual-band router from China's TOTOLINK Electronics TOTOLINK that supports MQTT protocol and Telnet service. The TOTOLINK T6 suffers from a buffer overflow vulnerability, which originates from the parameter ip in the file /cgi-bin/cstecgi.cgi that fails to correctly...

The vulnerability of the fromNetToolGet() function (/goform/setPingInfo) in the Tenda O3 wireless access point software allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromNetToolGet function /goform/setPingInfo in the Tenda O3 wireless access point software arises due to buffer overflows during the processing of the ip parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...