Lucene search
+L

12431 matches found

OSV
OSV
added 2025/09/24 6:15 p.m.9 views

CVE-2025-52906

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

9.8CVSS5.8AI score0.12845EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/24 6:12 p.m.12 views

CVE-2025-52907 TOTOLINK X6000R Security Bypass Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7.3CVSS0.00846EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/24 6:12 p.m.24 views

CVE-2025-52907

CVE-2025-52907 concerns TOTOLINK X6000R, a Wi‑Fi 6 router. The connected sources describe an improper input validation vulnerability in the device’s software stack that can enable command injection and file manipulation. The affected release range is X6000R through version V9.4.0cu.1360_B20241207...

8.8CVSS6.6AI score0.00846EPSS
SaveIn wildExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/24 6:12 p.m.2 views

CVE-2025-52907 TOTOLINK X6000R Security Bypass Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Command Injection, File Manipulation.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7.3CVSS6.6AI score0.00846EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/24 5:44 p.m.71 views

CVE-2025-52906

Summary (grounded in provided documents): TOTOLINK X6000R firmware versions up to and including V9.4.0cu.1360_B20241207 are affected by an OS Command Injection caused by improper neutralization of special elements in OS commands. This vulnerability could allow an attacker to execute arbitrary com...

9.8CVSS6.7AI score0.12845EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/24 5:44 p.m.4 views

CVE-2025-52906 TOTOLINK X6000R Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

9.3CVSS6.7AI score0.12845EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/24 5:44 p.m.263 views

CVE-2025-52906 TOTOLINK X6000R Command Injection Vulnerability

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TOTOLINK X6000R allows OS Command Injection.This issue affects X6000R: through V9.4.0cu.1360B20241207...

9.3CVSS0.12845EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/24 12:00 a.m.6 views

PT-2025-39313

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1360 B20241207 Description The software contains an improper input validation issue that can lead to command injection and file manipulation. The vulnerability exists due to insufficient validation of...

7.3CVSS7.3AI score0.00846EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2025/09/24 12:00 a.m.16 views

PT-2025-39310

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1360 B20241207 Description A flaw exists in TOTOLINK X6000R that allows for OS Command Injection. This occurs due to improper neutralization of special elements used in an OS command. An attacker could...

9.8CVSS6.8AI score0.12845EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/09/24 12:00 a.m.12 views

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an OS command injection vulnerability that stems from a failure to properly filter special...

9.8CVSS7.5AI score0.12845EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/09/24 12:00 a.m.9 views

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a Wi-Fi 6 technology-enabled wireless router from China's Gion Electronics TOTOLINK, featuring high concurrent connections and dual-band transmission. The TOTOLINK X6000R suffers from an improper input validation vulnerability that originates from the program's failure to...

8.8CVSS7.3AI score0.00846EPSS
SaveExploits0References3
OSV
OSV
added 2025/09/23 6:15 p.m.6 views

CVE-2025-52905

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7.5CVSS5.8AI score0.0805EPSS
SaveExploits0References2
NVD
NVD
added 2025/09/23 6:15 p.m.9 views

CVE-2025-52905

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7.5CVSS0.0805EPSS
SaveExploits0References2
CVE
CVE
added 2025/09/23 5:53 p.m.24 views

CVE-2025-52905

CVE-2025-52905 affects the TOTOLINK X6000R router. The vulnerability is described as an improper input validation issue that can enable flooding attacks, with impact noted as high availability impact . Affected versions are listed as through V9.4.0cu.1360_B20241207. The root cause is insufficient...

7.5CVSS6.5AI score0.0805EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2025/09/23 5:53 p.m.25 views

CVE-2025-52905 TOTOLINK X6000R Argument Injection Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7CVSS0.0805EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/23 5:53 p.m.5 views

CVE-2025-52905 TOTOLINK X6000R Argument Injection Vulnerability

Improper Input Validation vulnerability in TOTOLINK X6000R allows Flooding.This issue affects X6000R: through V9.4.0cu.1360B20241207...

7CVSS6.5AI score0.0805EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/09/23 12:00 a.m.11 views

TOTOLINK X6000R 安全漏洞

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from an improper input validation vulnerability, which can be exploited by...

7.5CVSS6.7AI score0.0805EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/23 12:00 a.m.14 views

PT-2025-39196

Name of the Vulnerable Software and Affected Versions TOTOLINK X6000R versions through V9.4.0cu.1360 B20241207 Description An improper input validation issue exists in TOTOLINK X6000R, potentially allowing for flooding attacks. The issue affects the device due to insufficient validation of input...

7CVSS6.6AI score0.0805EPSS
SaveExploits0References7
CNVD
CNVD
added 2025/09/18 12:00 a.m.4 views

TOTOLINK X6000R sub_417D74 function command injection vulnerability

TOTOLINK X6000R is a wireless router supporting Wi-Fi 6 technology from China's Gion Electronics TOTOLINK, focusing on high concurrent connections and dual-band transmission capabilities. The TOTOLINK X6000R suffers from a command injection vulnerability that stems from the failure to properly...

9.8CVSS7.8AI score0.04374EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/09/17 12:49 a.m.24 views

CVE-2025-52053

TOTOLINK X6000R V9.4.0cu.1360B20241207 was found to contain a command injection vulnerability in the sub417D74 function via the filename parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request...

9.8CVSS8.3AI score0.04374EPSS
SaveExploits1References1
Rows per page
Query Builder