12 matches found
EUVD-2024-30173
Malicious code in bioql PyPI...
EUVD-2024-30171
Malicious code in bioql PyPI...
CVE-2024-32354
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'timeout' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...
CVE-2024-32355
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...
CVE-2024-32353
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...
CVE-2024-32353
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'port' parameter in the setSSServer function at /cgi-bin/cstecgi.cgi...
CVE-2024-32355
TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain a command injection vulnerability via the 'password' parameter in the setSSServer function...
CVE-2024-32353
The TOTOLINK X5000R router (version 9.1.0cu.2350_B20230313 ) is vulnerable to a command injection flaw within the setSSServer function at the /cgi-bin/cstecgi.cgi endpoint. The root cause is a failure to properly sanitize input data, specifically the port, password, and timeout parameters, which ...
PT-2024-24531 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found in the setSSServer function via the timeout parameter at the "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version...
PT-2024-24530 · Totolink · Totolink X5000R
Name of the Vulnerable Software and Affected Versions: TOTOLINK X5000R version 9.1.0cu.2350 B20230313 Description: A command injection issue was found via the port parameter in the setSSServer function at "/cgi-bin/cstecgi.cgi" API endpoint. Recommendations: For TOTOLINK X5000R version 9.1.0cu.23...
