Lucene search
K

16 matches found

RedhatCVE
RedhatCVE
added 2026/04/29 2:48 p.m.4 views

CVE-2026-7218

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function iscmdstringvalid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out...

8.6CVSS7.6AI score0.00101EPSS
Exploits0References1
NVD
NVD
added 2026/04/28 3:16 a.m.1 views

CVE-2026-7218

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function iscmdstringvalid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out...

8.6CVSS0.00101EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/28 2:45 a.m.25 views

CVE-2026-7218 Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function iscmdstringvalid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out...

8.6CVSS0.00101EPSS
Exploits0References5
CVE
CVE
added 2026/04/28 2:45 a.m.5 views

CVE-2026-7218

The CVE-2026-7218 affects Totolink N300RT (version 3.4.0-B20250430). The vulnerable element is the is_cmd_string_valid function in the file /boafrm/formWsc of libapmib.so; altering the argument localPin can trigger a buffer overflow. This vulnerability can be exploited remotely, and public exploi...

8.6CVSS7.7AI score0.00101EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/28 2:45 a.m.4 views

EUVD-2026-25974

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function iscmdstringvalid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out...

8.6CVSS7.6AI score0.00101EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/04/28 2:45 a.m.1 views

CVE-2026-7218

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function iscmdstringvalid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out...

8.6CVSS7.7AI score0.00101EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/28 2:45 a.m.1 views

CVE-2026-7218 Totolink N300RT libapmib.so formWsc is_cmd_string_valid buffer overflow

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function iscmdstringvalid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried out...

8.6CVSS7.6AI score0.00101EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/28 12:0 a.m.2 views

PT-2026-35650

A vulnerability was detected in Totolink N300RT 3.4.0-B20250430. The impacted element is the function is cmd string valid of the file /boafrm/formWsc of the component libapmib.so. Performing a manipulation of the argument localPin results in buffer overflow. The attack is possible to be carried o...

8.6CVSS5.9AI score0.00101EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.1 views

CVE-2023-50383

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

7.2CVSS7.9AI score0.00666EPSS
Exploits0References1
VulnCheck KEV
VulnCheck KEV
added 2025/10/19 12:0 a.m.28 views

VulnCheck KEV: CVE-2025-3987

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS5.6AI score0.08142EPSS
In wildExploits1References2
OSV
OSV
added 2025/05/09 5:15 a.m.0 views

CVE-2025-4462

A vulnerability, which was classified as critical, has been found in TOTOLINK N150RT 3.4.0-B20190525. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to buffer overflow. The attack may be initiated remotely. The exploit has...

8.7CVSS6.1AI score
Exploits0References5
CNNVD
CNNVD
added 2025/05/09 12:0 a.m.1 views

TOTOLINK N150RT 安全漏洞

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability, which originates from the parameter localPin in the file /boafrm/formWsc that fails to properly validate the length of the input data, which can be...

9CVSS9AI score0.00947EPSS
Exploits1References6
OSV
OSV
added 2025/04/27 10:15 p.m.0 views

CVE-2025-3987

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formWsc. The manipulation of the argument localPin leads to command injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS5.7AI score0.08142EPSS
Exploits1References5
CNNVD
CNNVD
added 2025/04/27 12:0 a.m.1 views

TOTOLINK N150RT 注入漏洞

The TOTOLINK N150RT is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N150RT suffers from a command injection vulnerability that stems from the parameter localPin in the file /boafrm/formWsc failing to correctly filter constructed command special characters, commands, and ...

8.8CVSS7.6AI score0.08142EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/04/06 12:0 a.m.1 views

PT-2025-18018 · Totolink · Totolink N150Rt

Name of the Vulnerable Software and Affected Versions: TOTOLINK N150RT version 3.4.0-B20190525 Description: A critical issue affects the processing of the file /boafrm/formWsc. The manipulation of the localPin argument leads to command injection. The attack may be initiated remotely...

8.8CVSS6.7AI score0.08142EPSS
Exploits1References17
OSV
OSV
added 2024/07/08 4:15 p.m.0 views

CVE-2023-50383

Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...

7.2CVSS5.9AI score0.00666EPSS
Exploits0References2
Rows per page
Query Builder