CVE-2025-40733

Reflected Cross-Site Scripting XSS vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php...

CVE-2025-40734 Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager

Reflected Cross-Site Scripting XSS vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirmpassword parameters in /register.php...

CVE-2025-40732

CVE-2025-40732 affects Daily Expense Manager v1.0. The issue is a user-enumeration vulnerability caused by an unvalidated name parameter in /check.php, exploitable via a POST request containing the name parameter. Mitigation suggestions from connected sources include restricting access to /check....

CVE-2025-40732 User enumeration vulnerability in Daily Expense Manager

user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php...

CVE-2025-40732 User enumeration vulnerability in Daily Expense Manager

user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.php...

CVE-2024-53621

A buffer overflow in the formSetCfm function of Tenda AC1206 1200M 11ac USAC1206V1.0RTLV15.03.06.23multiTD01 allows attackers to cause a Denial of Service DoS via a crafted POST request...

The vulnerability of the setSchedWifi function in Tenda AS5 microprogrammed router software, which allows for the execution of arbitrary code.

The vulnerability of the setSchedWifi function in Tenda AS5 software-based routers is related to buffer overflows in the stack when processing the schedEndTime parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted POST request...

CVE-2025-6751

A vulnerability, which was classified as critical, was found in Linksys E8450 up to 1.2.00.360516. This affects the function setdevicelanguage of the file portal.cgi of the component HTTP POST Request Handler. The manipulation of the argument dutlanguage leads to buffer overflow. It is possible t...

CVE-2025-6825 TOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6825

CVE-2025-6825 affects TOTOLINK A702R up to version 4.0.0-B20230721.1521. The vulnerability is in the HTTP POST Request Handler, specifically the file /boafrm/formWlSiteSurvey, where manipulating the submit-url argument leads to a buffer overflow. The issue can be exploited remotely and has been d...

CVE-2025-6825 TOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow

A vulnerability classified as critical was found in TOTOLINK A702R up to 4.0.0-B20230721.1521. Affected by this vulnerability is an unknown functionality of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

CVE-2025-6824

A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible ...

CVE-2025-6824 TOTOLINK X15 HTTP POST Request formParentControl buffer overflow

A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible ...

CVE-2025-6824 TOTOLINK X15 HTTP POST Request formParentControl buffer overflow

A vulnerability classified as critical has been found in TOTOLINK X15 up to 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible ...

CVE-2025-6824

CVE-2025-6824 affects TOTOLINK X15 (up to version 1.0.0-B20230714.1105). The issue is in the HTTP POST Request Handler, specifically the /boafrm/formParentControl component, where manipulation of the submit-url argument can trigger a buffer overflow. The vulnerability is exploitable remotely, and...

PT-2025-27504 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20230721.1521 Description: A critical vulnerability affects an unknown functionality of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the submit-url argument...

PT-2025-27529 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability was found in the HTTP POST Request Handler component of the TOTOLINK A3002RU. The issue affects an unknown function of the file /boafrm/formParentControl. The...

PT-2025-27325 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 versions up to 1.0.0-B20230714.1105 Description: A critical vulnerability has been found in the HTTP POST Request Handler component of TOTOLINK X15. The issue affects an unknown function of the file /boafrm/formParentControl. The...

PT-2025-27503 · Totolink · Totolink A3002Ru

Name of the Vulnerable Software and Affected Versions: TOTOLINK A3002RU version 3.0.0-B20230809.1615 Description: A critical vulnerability has been found in the HTTP POST Request Handler component of the TOTOLINK A3002RU router. The issue affects an unknown function of the file...

PT-2025-27326 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R versions up to 4.0.0-B20230721.1521 Description: A critical vulnerability was found in the HTTP POST Request Handler component of TOTOLINK A702R, affecting an unknown functionality of the file /boafrm/formWlSiteSurvey. The...