https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:02:32 +0000 https://vulnerability.circl.lu/vuln/bdu:2025-10018 bdu:2025-10018 https://vulnerability.circl.lu/vuln/bdu:2025-10018 https://vulnerability.circl.lu/vuln/cnvd-2025-18925 cnvd-2025-18925 https://vulnerability.circl.lu/vuln/cnvd-2025-18925 https://vulnerability.circl.lu/vuln/fkie_cve-2025-7154 <p>A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-7154 https://vulnerability.circl.lu/vuln/ghsa-8phr-4rr8-jx8r <p>A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> <p>A vulnerability, which was classified as critical, has been found in TOTOLINK N200RE 9.3.5u.6095_B20200916/9.3.5u.6139_B20201216. Affected by this issue is the function sub_41A0F8 of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Hostname leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.</p> https://vulnerability.circl.lu/vuln/ghsa-8phr-4rr8-jx8r