EUVD-2022-37691

Malicious code in bioql PyPI...

The vulnerability of the setNoticeCfg() function in the /lib/cste_modules/system.so module of the TOTOLink A950RG router’s microprogramming software allows a intruder to execute arbitrary commands and gain full control over the device.

The vulnerability of the setNoticeCfg function in the /lib/cstemodules/system.so module of the TOTOLink A950RG router’s microprogramming software is related to the issue where an operation is performed outside the buffer in memory when processing the NoticeUrl parameter. Exploiting this...

Huawei EMUI/HarmonyOS Out-of-Bounds Write Vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a mobile operating system based on Android, and Huawei HarmonyOS, a distributed operating system developed by Huawei for the whole scenario, aiming at realizing intelligent interconnection and resource sharing among people, devices, an...

CVE-2022-34742

The system module has a read/write vulnerability. Successful exploitation of this vulnerability may affect data confidentiality...

TOTOLINK EX1200T 操作系统命令注入漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China-based Gion Electronics TOTOLINK.A command injection vulnerability exists in TOTOLINK EX1200T V4.1.2cu.5215, which originates from the file lib/cstemodules/system in the setNoticeCfg function in the file lib/cstemodules/system fails to properly...