CVE-2023-29802

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

TOTOLINK X18 命令注入漏洞

TOTOLINK X18 is a mesh router system from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK X18 version V9.1.0cu.2024B20220329, which originates from a command injection vulnerability via the ip parameter in the setDiagnosisCfg function...

CVE-2023-29798

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the command parameter in the setTracerouteCfg function...

CVE-2023-29800

TOTOLINK X18 V9.1.0cu.2024B20220329 was discovered to contain a command injection vulnerability via the FileName parameter in the UploadFirmwareFile function...

CVE-2023-29803

CVE-2023-29803 affects TOTOLINK X18, version 9.1.0cu.2024_B20220329. The issue is a command injection in the disconnectVPN function triggered through the pid parameter, caused by insufficient argument checking. The CVSS v3.1 score is 9.8 (CRITICAL) with network access, no privileges, no user inte...

PT-2023-3154 · Totolink · Totolink X18

Name of the Vulnerable Software and Affected Versions: TOTOLINK X18 version 9.1.0cu.2024 B20220329 Description: The issue is related to a command injection vulnerability in the setTracerouteCfg function, specifically via the command parameter. This vulnerability can be exploited by a remote...

Anviz CrossChex Buffer Overflow

Waits for broadcasts from Ainz CrossChex looking for new devices, and returns a custom broadcast, triggering a stack buffer overflow. Module Options msf use exploit/windows/misc/crosschex/devicebof msf undefineddevicebof show actions ...actions... msf undefineddevicebof set ACTION msf...