Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
n 6.5-20250329 is able to address this issue. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312610 - https://vuldb.com/?ctiid.312610 - https://vuldb.com/?submit.593000 - https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00107.html - https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00109.html - https://lists.gnu.org/archive/html/bug-ncurses/2025-03/msg00114.html - https://invisible-island.net/ncurses/NEWS.html#index-t20250329 - https://www.gnu.org/
CVE ID: CVE-2025-6142 State: PUBLISHED Published: 2025-06-16T22:00:19.298Z Last Updated: 2025-06-17T13:51:01.877Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Intera Products: InHire Problem Types: CWE-918 Description: A vulnerability was found in Intera InHire up to 20250530. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation of the argument 29chcotoo9 leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312613 - https://vuldb.com/?ctiid.312613 - https://vuldb.com/?submit.587665 - https://drive.google.com/file/d/1-doSYzFeLaKtd_b6RmpBtZ5qtsvu4gYI/view?usp=sharing
CVE ID: CVE-2025-6143 State: PUBLISHED Published: 2025-06-16T22:31:07.215Z Last Updated: 2025-06-17T13:49:17.998Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312618 - https://vuldb.com/?ctiid.312618 - https://vuldb.com/?submit.593004 - https://github.com/awindog/cve/blob/main/13.md - https://www.totolink.net/
CVE ID: CVE-2025-6144 State: PUBLISHED Published: 2025-06-16T23:00:14.962Z Last Updated: 2025-06-17T13:48:06.043Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formSysCmd of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312619 - https://vuldb.com/?ctiid.312619 - https://vuldb.com/?submit.593009 - https://github.com/awindog/cve/blob/main/688/1.md - https://github.com/awindog/cve/blob/main/688/1.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6145 State: PUBLISHED Published: 2025-06-16T23:00:17.423Z Last Updated: 2025-06-17T18:01:25.246Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
ched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312620 - https://vuldb.com/?ctiid.312620 - https://vuldb.com/?submit.593011 - https://github.com/awindog/cve/blob/main/688/2.md - https://github.com/awindog/cve/blob/main/688/2.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6146 State: PUBLISHED Published: 2025-06-16T23:31:07.321Z Last Updated: 2025-06-17T17:53:06.274Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. This affects an unknown part of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312621 - https://vuldb.com/?ctiid.312621 - https://vuldb.com/?submit.593014 - https://github.com/Lena-lyy/cve/blob/main/3.md - https://github.com/Lena-lyy/cve/blob/main/3.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6147 State: PUBLISHED Published: 2025-06-17T00:00:19.977Z Last Updated: 2025-06-17T17:34:23.094Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A702R Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312622 - https://vuldb.com/?ctiid.312622 - https://vuldb.com/?submit.593015 - https://github.com/Lena-lyy/cve/blob/main/4.md - https://github.com/Lena-lyy/cve/blob/main/4.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6148 State: PUBLISHED Published: 2025-06-17T00:00:23.401Z Last Updated: 2025-06-17T15:54:04.497Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. It has been rated as critical. This issue affects some unknown processing of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312623 - https://vuldb.com/?ctiid.312623 - https://vuldb.com/?submit.593018 - https://github.com/Lena-lyy/cve/blob/main/5.md - https://github.com/Lena-lyy/cve/blob/main/5.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6149 State: PUBLISHED Published: 2025-06-17T00:31:07.076Z Last Updated: 2025-06-17T13:46:31.392Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3002R Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in TOTOLINK A3002R 4.0.0-B20230531.1404. Affected is an unknown function of the file /boafrm/formSysLog of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312624 - https://vuldb.com/?ctiid.312624 - https://vuldb.com/?submit.593019 - https://github.com/Lena-lyy/cve/blob/main/6.md - https://github.com/Lena-lyy/cve/blob/main/6.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6150 State: PUBLISHED Published: 2025-06-17T00:31:09.415Z Last Updated: 2025-06-17T13:42:47.513Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: X15 Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312625 - https://vuldb.com/?ctiid.312625 - https://vuldb.com/?submit.593021 - https://github.com/Lena-lyy/cve/blob/main/688/7.md - https://github.com/Lena-lyy/cve/blob/main/688/7.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6151 State: PUBLISHED Published: 2025-06-17T01:00:17.593Z Last Updated: 2025-07-15T18:49:38.224Z Vendors: TP-Link Systems INC. Products: TL-WR940N V4, TL-WR841N V11 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TP-Link TL-WR940N V4 and TL-WR841N V11. Affected by this issue is some unknown functionality of the file /userRpm/WanSlaacCfgRpm.htm, which may lead to buffer overflow. The attack may be launched remotely. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/faq/4536/ - https://github.com/WhereisDoujo/
: - CISA ADP Vulnrichment: References: - https://www.tp-link.com/us/support/faq/4536/ - https://github.com/WhereisDoujo/CVE/issues/7 - https://vuldb.com/?id.312626 - https://vuldb.com/?ctiid.312626 - https://vuldb.com/?submit.593031
CVE ID: CVE-2025-6152 State: PUBLISHED Published: 2025-06-17T01:31:05.835Z Last Updated: 2025-06-17T14:19:20.164Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C) Vendors: Steel Products: Browser Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function handleFileUpload of the file api/src/modules/files/files.routes.ts. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The patch is named 7ba93a10000fb77ee01731478ef40551a27bd5b9. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA AD
fb77ee01731478ef40551a27bd5b9. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312627 - https://vuldb.com/?ctiid.312627 - https://vuldb.com/?submit.593060 - https://github.com/steel-dev/steel-browser/issues/129 - https://github.com/steel-dev/steel-browser/issues/129#issuecomment-2936052240 - https://github.com/steel-dev/steel-browser/commit/7ba93a10000fb77ee01731478ef40551a27bd5b9
CVE ID: CVE-2025-6153 State: PUBLISHED Published: 2025-06-17T02:00:09.055Z Last Updated: 2025-06-17T13:40:05.919Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Hostel Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/students.php. The manipulation of the argument search_box leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312628 - https://vuldb.com/?ctiid.312628 - https://vuldb.com/?submit.593075 - https://github.com/zzb1388/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-6154 State: PUBLISHED Published: 2025-06-17T02:31:06.416Z Last Updated: 2025-06-17T15:50:44.203Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /includes/login.inc.php. The manipulation of the argument student_roll_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312629 - https://vuldb.com/?ctiid.312629 - https://vuldb.com/?submit.593076 - https://github.com/zzb1388/cve/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-6155 State: PUBLISHED Published: 2025-06-17T02:31:09.493Z Last Updated: 2025-06-17T20:01:09.638Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312630 - https://vuldb.com/?ctiid.312630 - https://vuldb.com/?submit.593078 - https://github.com/zzb1388/cve/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-6156 State: PUBLISHED Published: 2025-06-17T03:00:15.693Z Last Updated: 2025-06-17T19:57:05.491Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-ds.php. The manipulation of the argument testtype leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
ack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312631 - https://vuldb.com/?ctiid.312631 - https://vuldb.com/?submit.593100 - https://github.com/f1rstb100d/myCVE/issues/66 - https://phpgurukul.com/
CVE ID: CVE-2025-6157 State: PUBLISHED Published: 2025-06-17T03:00:18.673Z Last Updated: 2025-06-17T19:51:48.624Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Nipah Virus Testing Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registered-user-testing.php. The manipulation of the argument testtype leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312632 - https://vuldb.com/?ctiid.312632 - https://vuldb.com/?submit.593101 - https://github.com/f1rstb100d/myCVE/issues/67 - https://phpgurukul.com/
CVE ID: CVE-2025-6158 State: PUBLISHED Published: 2025-06-17T03:31:05.773Z Last Updated: 2025-06-17T19:46:27.259Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-665 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in D-Link DIR-665 1.00. This affects the function sub_AC78 of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: -
d. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312633 - https://vuldb.com/?ctiid.312633 - https://vuldb.com/?submit.593161 - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir665-dlink - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir665-dlink#poc - https://www.dlink.com/
CVE ID: CVE-2025-6159 State: PUBLISHED Published: 2025-06-17T04:00:13.369Z Last Updated: 2025-06-17T19:38:45.970Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /allocate_room.php. The manipulation of the argument search_box leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312634 - https://vuldb.com/?ctiid.312634 - https://vuldb.com/?submit.593177 - https://github.com/Aalok-zz/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6160 State: PUBLISHED Published: 2025-06-17T04:31:06.366Z Last Updated: 2025-06-17T19:18:00.948Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Client Database Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /user_customer_create_order.php. The manipulation of the argument user_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - C
k may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312635 - https://vuldb.com/?ctiid.312635 - https://vuldb.com/?submit.593216 - https://github.com/yitianweiming/cve/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6161 State: PUBLISHED Published: 2025-06-17T04:31:08.694Z Last Updated: 2025-06-17T15:19:06.212Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Food Ordering System Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple Food Ordering System 1.0. Affected is an unknown function of the file /editproduct.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312636 - https://vuldb.com/?ctiid.312636 - https://vuldb.com/?submit.593237 - https://github.com/kakalalaww/CVE/issues/17 - https://www.sourcecodester.com/
CVE ID: CVE-2025-6162 State: PUBLISHED Published: 2025-06-17T05:00:11.195Z Last Updated: 2025-06-17T15:10:27.153Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CIS
can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312637 - https://vuldb.com/?ctiid.312637 - https://vuldb.com/?submit.593600 - https://github.com/Lena-lyy/cve/blob/main/688/8.md - https://github.com/Lena-lyy/cve/blob/main/688/8.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6163 State: PUBLISHED Published: 2025-06-17T05:00:14.794Z Last Updated: 2025-06-17T13:38:34.562Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3002RU Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK A3002RU 3.0.0-B20230809.1615 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
hed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.312638 - https://vuldb.com/?ctiid.312638 - https://vuldb.com/?submit.593601 - https://github.com/Lena-lyy/cve/blob/main/688/9.md - https://github.com/Lena-lyy/cve/blob/main/688/9.md#poc - https://www.totolink.net/
CVE ID: CVE-2025-6164 State: PUBLISHED Published: 2025-06-17T05:31:07.479Z Last Updated: 2025-06-17T13:36:40.928Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3002R Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an unknown part of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: