Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 22:41:43 +0000 bdu:2025-05819 https://vulnerability.circl.lu/vuln/bdu:2025-05819 bdu:2025-05819 https://vulnerability.circl.lu/vuln/bdu:2025-05819 cnvd-2025-11977 https://vulnerability.circl.lu/vuln/cnvd-2025-11977 cnvd-2025-11977 https://vulnerability.circl.lu/vuln/cnvd-2025-11977 fkie_cve-2025-4729 https://vulnerability.circl.lu/vuln/fkie_cve-2025-4729 <p>A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-4729 GHSA-f336-wh5w-hf9v https://vulnerability.circl.lu/vuln/ghsa-f336-wh5w-hf9v <p>A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability was found in TOTOLINK A3002R and A3002RU 3.0.0-B20230809.1615. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formMapDelDevice of the component HTTP POST Request Handler. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.</p> https://vulnerability.circl.lu/vuln/ghsa-f336-wh5w-hf9v