Lucene search
+L

13089 matches found

CNNVD
CNNVD
added 2025/01/21 12:00 a.m.10 views

TOTOLINK A810R 安全漏洞

The TOTOLink A810R is a wireless dual-band router from China's TotoLink. The TOTOLINK A810R suffers from a command injection vulnerability that can be exploited by an attacker to execute arbitrary commands by sending HTTP requests...

8.1CVSS8AI score0.00562EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/01/21 12:00 a.m.11 views

CVE-2024-57036

TOTOLINK A810R V4.1.2cu.5032B20200407 was found to contain a command insertion vulnerability in downloadFile.cgi main function. This vulnerability allows an attacker to execute arbitrary commands by sending HTTP request...

8.6AI score0.00562EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/21 12:00 a.m.96 views

CVE-2024-57036

CVE-2024-57036 applies to TOTOLINK A810R, specifically version 4.1.2cu.5032_B20200407. The vulnerability is a command insertion flaw in the downloadFile.cgi main function that allows an attacker to execute arbitrary commands by sending a crafted HTTP request. The reported CVSSv3.1 base score is 8...

8.1CVSS7.7AI score0.00562EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
added 2025/01/17 12:00 a.m.9 views

TOTOLINK X5000R switch parameter command injection vulnerability in the setScheduleCfg function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the failure of the "switch" parameter in setScheduleCfg to correctly filter for constructor command special...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.53 views

TOTOLINK X5000R Limit Parameter Command Injection Vulnerability in the setVpnAccountCfg Function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "limit" parameter in setVpnAccountCfg failing to correctly filter constructor special characters, commands,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.26 views

TOTOLINK X5000R recHour Parameter Command Injection Vulnerability in the setScheduleCfg Function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "recHour" parameter in setScheduleCfg failing to correctly filter for constructor special characters,...

8.8CVSS7.4AI score0.01217EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.15 views

TOTOLINK X5000R eHour Parameter Command Injection Vulnerability in setWiFiScheduleCfg Function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "eHour" parameter in setWiFiScheduleCfg failing to properly filter constructed command special characters, commands, etc. This vulnerabili...

8.8CVSS9.5AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.8 views

TOTOLINK X5000R eMinute Parameter Command Injection Vulnerability in setWiFiScheduleCfg Function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "eMinute" parameter in setWiFiScheduleCfg failing to properly filter constructor special characters, commands, etc. The vulnerability can ...

6.8CVSS9.6AI score0.01506EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.14 views

TOTOLINK X5000R setScheduleCfg function's hour parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "hour" parameter in setScheduleCfg failing to correctly filter constructed command special characters,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.9 views

TOTOLINK X5000R setWiFiScheduleCfg function desc parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "desc" parameter in setWiFiScheduleCfg failing to properly filter constructed command special characters, commands, etc. This vulnerabilit...

6.8CVSS9.5AI score0.01354EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.60 views

TOTOLINK X5000R sMinute Parameter Command Injection Vulnerability in the setWiFiScheduleCfg Function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "sMinute" parameter in setWiFiScheduleCfg failing to correctly filter constructed command special characters,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.23 views

TOTOLINK X5000R setVpnAccountCfg function user parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "user" parameter in setVpnAccountCfg failing to properly filter constructed command special characters, commands, etc. This vulnerability...

8.8CVSS9.5AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.6 views

TOTOLINK X5000R setVpnAccountCfg function pass parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "pass" parameter in setVpnAccountCfg failing to correctly filter constructor special characters, commands,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.22 views

TOTOLINK X5000R setScheduleCfg function week parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the failure of the "week" parameter in setScheduleCfg to correctly filter for constructed command special...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.8 views

TOTOLINK X5000R setScheduleCfg Function Minute Parameter Command Injection Vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the "minute" parameter in setScheduleCfg failing to properly filter constructed command special characters, commands, etc. This vulnerability...

8.8CVSS9.5AI score0.01742EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.5 views

TOTOLINK X5000R setVpnAccountCfg function desc parameter command injection vulnerability

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. The TOTOLINK X5000R suffers from a command injection vulnerability, which stems from the "desc" parameter in setVpnAccountCfg failing to properly filter constructed command special characters, commands, etc. This vulnerabilit...

8.8CVSS9.6AI score0.01604EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.12 views

TOTOLINK X5000R week parameter command injection vulnerability in setWiFiScheduleCfg function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "week" parameter in setWiFiScheduleCfg failing to correctly filter constructed command special characters,...

6.8CVSS7.4AI score0.01354EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/01/17 12:00 a.m.49 views

TOTOLINK X5000R sHour Parameter Command Injection Vulnerability in the setWiFiScheduleCfg Function

The TOTOLINK X5000R is a router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in TOTOLINK X5000R version V9.1.0cu.2350B20230313, which stems from the "sHour" parameter in setWiFiScheduleCfg failing to correctly filter constructed command special characters,...

8.8CVSS7.4AI score0.01604EPSS
SaveExploits1References1
OSV
OSV
added 2025/01/15 5:15 p.m.8 views

CVE-2024-57024

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "eMinute" parameter in setWiFiScheduleCfg...

6.8CVSS5.8AI score0.01506EPSS
SaveExploits1References2
OSV
OSV
added 2025/01/15 5:15 p.m.10 views

CVE-2024-57025

TOTOLINK X5000R V9.1.0cu.2350B20230313 was discovered to contain an OS command injection vulnerability via the "desc" parameter in setWiFiScheduleCfg...

6.8CVSS7.3AI score0.01354EPSS
SaveExploits1References2
Rows per page
Query Builder