EUVD-2023-28203

Malicious code in bioql PyPI...

CVE-2023-24140

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function...

Command injection

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function...

CVE-2023-24140

TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the NetDiagPingNum parameter in the setNetworkDiag function...

CVE-2023-24140

CVE-2023-24140 affects TOTOLINK CA300-PoE hardware running V6.2c.884. The issue is a command injection via the NetDiagPingNum parameter in the setNetworkDiag function. Multiple sources corroborate this vulnerability, with a high-severity CVSS v3.1 score (9.8, Network, no authentication, user inte...