TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32571)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setAppFilterCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly handle the enabl...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32591)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the sprintf function in the HTTP Handler component, specifically the autoreboot.asp file...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32587)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the sprintf function in the /usergroup.asp file within the CGI Handler component, which...

Ollama GGUF Model Loader Heap Out-of-Bounds Read Vulnerability

Ollama is an open source large language model deployment and inference tool, mainly providing model loading, quantization and API interface services. The Ollama GGUF model loader suffers from a heap out-of-bounds read vulnerability that stems from the /api/create interface failing to properly...

IBM Db2 Denial-of-Service Vulnerability (CNVD-2026-29422)

IBM Db2 is a relational database management system that primarily provides functions for data storage, querying, and management. IBM Db2 has a denial-of-service vulnerability, which stems from improper of special elements in the data query logic. Attackers can exploit this vulnerability to cause...

IBM i Web Administration GUI Elevation of Privilege Vulnerability

IBM i is an integrated operating system developed by IBM for use on IBM Power Systems servers, providing database, network, and application services. An elevation of privilege vulnerability exists in IBM i. The vulnerability stems from an invalid authorization check in the Web Administration GUI...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32589)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability, which stems from a function in the file/urlrule.asp called urlruleasp failing to correctly validate the input length...

TOTOLINK N300RH buffer overflow vulnerability (CNVD-2026-32745)

TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. The TOTOLINK N300RH has a buffer overflow vulnerability. This vulnerability stems from the setMacFilterRules...

TOTOLINK N300RH buffer overflow vulnerability

TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. The TOTOLINK N300RH has a buffer overflow vulnerability. This vulnerability stems from the setWanConfig functio...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32588)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability, which stems from the tgglasp function in the HTTP Request Handler component, where the /tgll.asp file fails to properl...

TOTOLINK WA300 buffer overflow vulnerability (CNVD-2026-32752)

TOTOLINK WA300 is a 300Mbps single-band 2.4GHz wired wireless AP access point designed for installation on standard 86-type enclosures. It is primarily used for wireless coverage in hotels, dormitories, and office environments. The TOTOLINK WA300 has a buffer overflow vulnerability, which stems...

IBM Turbonomic prometurbo agent elevation of privilege vulnerability

The IBM Turbonomic prometurbo agent is a component in IBM Turbonomic Application Resource Management that is used to manage resource configurations. An elevation of privilege vulnerability exists in IBM Turbonomic prometurbo agent. The vulnerability stems from an excessive cluster-wide permission...

Google Android ADB Authentication Bypass Vulnerability

Android is an open source mobile operating system developed by Google, widely used in smartphones, tablets, smart TVs, cars and various IoT devices, providing core capabilities such as application operation, device management, network communication, debugging and security control, etc. Android...

TOTOLINK WA300 command injection vulnerability (CNVD-2026-32751)

TOTOLINK WA300 is a 300Mbps single-band 2.4GHz wired wireless AP panel access point, designed for installation in standard 86-type enclosures. It is primarily used for wireless coverage in hotels, dormitories, and office environments. TOTOLINK WA300 has a command injection vulnerability. This...

D-Link DI-8100 buffer overflow vulnerability

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the handling of parameters in the Web Management Interface component’s file/urlmember.as...

TOTOLINK N300RH buffer overflow vulnerability (CNVD-2026-32747)

TOTOLINK N300RH is a 300Mbps single-band long-range wireless router launched by the TOTOLINK brand. It operates on the IEEE802.11n standard and is designed to enhance wireless coverage. The TOTOLINK N300RH has a buffer overflow vulnerability. This vulnerability stems from the loginauth function i...

TOTOLINK WA300 command injection vulnerability

TOTOLINK WA300 is a 300Mbps single-band 2.4GHz wired wireless AP panel access point, designed for installation in standard 86-type enclosures. It is primarily used for wireless coverage in hotels, dormitories, and office environments. TOTOLINK WA300 has a command injection vulnerability. This...

TOTOLINK WA300 command injection vulnerability (CNVD-2026-32750)

TOTOLINK WA300 is a 300Mbps single-band 2.4GHz wired wireless AP access point designed for installation in standard 86-type enclosures. It is primarily used for wireless coverage in hotels, dormitories, and office environments. TOTOLINK WA300 has a command injection vulnerability; this issue aris...

IBM Langflow Desktop file traversal vulnerability

IBM Langflow Desktop is a graphical-based AI workflow building tool, primarily used for low-code development of AI applications. IBM Langflow Desktop has a path traversal vulnerability. This vulnerability stems from the failure to properly validate the path parameters in URL requests provided by...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32574)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setOpenVpnClientCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly validate and...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32555)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the failure of the setWiFiBasicCfg function in the /cgi-bin/cstecgi.cgi file to properly validate the...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32592)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability, which stems from an issue with the function tgfilehtm in the CGI Endpoint component’s file tgfile.htm. This function...

D-Link DI-8100 buffer overflow vulnerability (CNVD-2026-32593)

The D-Link DI-8100 is a wired network behavior management router designed by D-Link for small and medium-sized businesses. The D-Link DI-8100 has a buffer overflow vulnerability. This vulnerability stems from the fileexten.asp function in the File Extension Handler component, which fails to...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32575)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the improper handling of user input in the User parameter of the setVpnAccountCfg function in the...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32573)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setRadvdCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly validate the...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32572)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWiFiEasyGuestCfg function in the CGI Handler component, specifically the operation of the merge...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32580)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from improper handling of the parameter “telnetEnabled” in the function setTelnetCfg within the...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32556)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setNtpCfg function in the CGI component cstecgi.cgi, which fails to properly validate the parameter...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32559)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from an issue with the setDmzCfg function in the cstecgi.cgi file of the CGI Handler component. The function...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32577)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setAdvancedInfoShow function in the /cgi-bin/cstecgi.cgi file, which fails to properly handle the...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32576)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the CsteSystem function in the file/cgi-bin/cstecgi.cgi, which fails to properly handle HTTP parameters...

OpenClaw has an unspecified vulnerability (CNVD-2026-19030)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a security vulnerability that can be exploited by an attacker to read arbitrary host files, thereby stealing sensitive credentials and accessing critical data...

OpenClaw has an unspecified vulnerability (CNVD-2026-19029)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to retrieve threaded messages that should be filtered by the sender's permission list...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32578)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from an issue with the setLoginPasswordCfg function in the cstecgi.cgi file within the CGI Handl...

OpenClaw path traversal vulnerability (CNVD-2026-19027)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a path traversal vulnerability that can be exploited by an attacker to bypass file system sandboxing restrictions to read arbitrary files...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32755)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability arises from the setIptvCfg function failing to properly validate the command parameters entered by users. Attacker...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32558)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setStorageCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly validate the...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32757)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from an issue in the setWizardCfg function of the /cgi-bin/cstecgi.cgi file, where the input...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32557)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWiFiAclRules function in the /cgi-bin/cstecgi.cgi file, which fails to properly handle the mode...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32579)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setMiniuiHomeInfoShow function in the cstecgi.cgi file, which fails to properly handle the sysinfo...

OpenClaw has an unspecified vulnerability (CNVD-2026-19026)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that can be exploited by an attacker to suppress legitimate events on different accounts by matching the eventname and messageid parameters...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32756)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the fact that the setUPnPCfg function in the cstecgi.cgi file fails to properly validate the input of t...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32753)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from an issue with the CsteSystem function in the /cgi-bin/cstecgi.cgi file, where it fails to properly...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32754)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics Corporation. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setWiFiEasyCfg function in the /cgi-bin/cstecgi.cgi file, which fails to properly handl...

OpenClaw Backlink Vulnerability (CNVD-2026-19028)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a backlink vulnerability that can be exploited by an attacker to upload a tar archive file containing a symbolic link to escape the sandbox and overwrite files on a remote host...

IBM Security Verify Directory File Upload Vulnerability

IBM Security Verify Directory is part of an authentication and access management solution from International Business Machines IBM. A file upload vulnerability exists in IBM Security Verify Directory versions 10.0.0 through 10.0.0.3. The vulnerability stems from an unverified file type and can be...

TOTOLINK A8000RU operating system command injection vulnerability (CNVD-2026-32758)

TOTOLINK A8000RU is a wireless router produced by China Jiying Electronics. The TOTOLINK A8000RU has a vulnerability related to operating system command injection. This vulnerability stems from the setVpnPassCfg function in the cstecgi.cgi component, which fails to properly handle the pptpPassThr...

Delta Electronics AS320T Denial of Service Vulnerability

Delta Electronics AS320T is a high-performance programmable logic controller device for industrial automation control from Delta Electronics China. A denial of service vulnerability exists in the Delta Electronics AS320T, which can be exploited by an attacker to cause a denial of service...

Delta Electronics AS320T Stack Buffer Overflow Vulnerability

Delta Electronics AS320T is a high-performance programmable logic controller device for industrial automation control from Delta Electronics China. The Delta Electronics AS320T suffers from a stack buffer overflow vulnerability that is caused by incorrect boundary checking of file names. An...

TOTOLINK A3300R stunPort Parameter Command Injection Vulnerability

TOTOLINK A3300R is a wireless router from China's Gion Electronics TOTOLINK. A command injection vulnerability exists in the TOTOLINK A3300R stunPort parameter, which originates from /cgi-bin/cstecgi.cgi failing to properly validate the stunPort parameter, and can be exploited by an attacker to...