EUVD-2024-16092

Malicious code in bioql PyPI...

CVE-2024-0296

A vulnerability has been found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hosttime leads to os command injection. The attack can be initiated remotel...

CVE-2024-0296 Totolink N200RE cstecgi.cgi NTPSyncWithHost os command injection

A vulnerability has been found in Totolink N200RE 9.3.5u.6139B20201216 and classified as critical. This vulnerability affects the function NTPSyncWithHost of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument hosttime leads to os command injection. The attack can be initiated remotel...

CVE-2024-0296

Totolink N200RE v9.3.5u.6139_B20201216 is affected by OS command injection in the NTPSyncWithHost function of /cgi-bin/cstecgi.cgi. The vulnerability stems from improper handling of the host_time parameter, enabling remote command execution. Public exploit/disclosure exists. Affected product: Tot...