EUVD-2025-22116

Malicious code in bioql PyPI...

CVE-2025-44655

The TOTOLink A7100RU V7.4 , A950RG V5.9 , and T10 V5.9 wireless routers are vulnerable due to the chroot_local_user option being enabled in the vsftpd.conf file. This incorrect privilege assignment can lead to unauthorized access to system files , privilege escalation , or allow an attacker to us...

CVE-2025-28034

TOTOLINK A800R V4.1.2cu.5137B20200730, A810R V4.1.2cu.5182B20201026, A830R V4.1.2cu.5182B20201102, A950RG V4.1.2cu.5161B20200903, A3000RU V5.9c.5185B20201128, and A3100R V4.1.2cu.5247B20211129 were found to contain a pre-auth remote command execution vulnerability in the NTPSyncWithHost function...

CVE-2025-28034

Several TOTOLINK wireless routers are vulnerable to a pre-auth remote command execution vulnerability. The issue resides in the NTPSyncWithHost function due to the failure to neutralize special elements in the hostTime parameter (CWE-78). Affected models and versions include A800R (V4.1.2cu.5137_...