PT-2025-24604 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical issue has been detected in the HTTP POST Request Handler component, specifically affecting an unknown functionality of the file /boafrm/formWsc. The manipulation of this...

PT-2025-24605 · Totolink · Totolink Ex1200T

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX1200T version 4.1.2cu.5232 B20210713 Description: A critical issue affects an unknown functionality of the file /boafrm/formDMZ of the component HTTP POST Request Handler, leading to a buffer overflow. The attack can be launched...

CVE-2025-5792

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This issue affects some unknown processing of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer...

CVE-2025-5789

A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possible to initiate the...

CVE-2025-5793 TOTOLINK EX1200T HTTP POST Request formPortFw buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possible ...

CVE-2025-5793

Totolink EX1200T (firmware 4.1.2cu.5232_B20210713) is affected by a buffer overflow in the HTTP POST Request Handler, specifically in /boafrm/formPortFw. Exploitation arises from unsafely handling the service_type argument, enabling remote code execution or denial of service. Multiple sources con...

CVE-2025-5789

CVE-2025-5789 affects TOTOLINK X15 1.0.0-B20230714.1105, specifically the HTTP POST Request Handler at /boafrm/formPortFw. Multiple connected sources state that manipulating the argument service_type causes a buffer overflow, enabling remote exploitation. Several disclosures indicate this can lea...

CVE-2025-5787

Summary (CVE-2025-5787) : A buffer overflow in TOTOLINK X15 (version 1.0.0-B20230714.1105) is triggered by manipulating the submit-url parameter in the HTTP POST Request Handler at /boafrm/formWsc. Reports across multiple sources indicate a remote attack potential with public exploit availability...

CVE-2025-5786 TOTOLINK X15 HTTP POST Request formDMZ buffer overflow

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launc...

CVE-2025-5786

CVE-2025-5786 affects TOTOLINK X15 firmware 1.0.0-B20230714.1105. The vulnerability is a buffer overflow in the /boafrm/formDMZ HTTP POST Request Handler triggered by manipulating the submit-url parameter, enabling remote access. Public exploit details exist and, per CNVD/CNNVD, may lead to arbit...

CVE-2025-5738

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

CVE-2025-5737

CVE-2025-5737 affects TOTOLINK X15 v1.0.0-B20230714.1105. The vulnerability lies in the HTTP POST Request Handler’s /boafrm/formDosCfg endpoint, where manipulating the submit-url argument can trigger a buffer overflow. Exploitation is possible remotely and has been publicly disclosed, with high i...

CVE-2025-5735

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be...

CVE-2025-5734

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The atta...

CVE-2025-5734

TOTOLINK X15 v1.0.0-B20230714.1105 is affected by a buffer overflow in the HTTP POST Request Handler, specifically in /boafrm/formWlanRedirect where input in the redirect-url argument can be manipulated to overflow a buffer. Exploitation can be remote and public exploit details exist. The reporte...

CVE-2025-5734 TOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflow

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The atta...

PT-2025-24312 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue has been identified, affecting an unknown function of the file /boafrm/formDMZ of the component HTTP POST Request Handler. The manipulation of the submit-url argument lea...

PT-2025-24342

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.02.13 Description A critical issue affects the function formSetIptv of the file /goform/SetIPTVCfg in the component POST Request Handler. The manipulation of the argument list leads to command injection. The attack may ...

PT-2025-24385 · Tenda · Tenda Ac15

Name of the Vulnerable Software and Affected Versions: Tenda AC15 version 15.03.05.19 multi Description: A critical vulnerability was found in the Tenda AC15 router, affecting the formsetschedled function of the file /goform/SetLEDCf in the HTTP POST Request Handler component. The manipulation of...

PT-2025-24317 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical issue has been discovered, affecting the HTTP POST Request Handler component, specifically the /boafrm/formPortFw file. The manipulation of the service type argument leads to a...