goldenGlow21/softwares_PoC

Releases0

softwares, its vulnerabilities and PoC

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-55588 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	7.5 HIGH	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the fw_ip parameter at /boafrm/formPortFw. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-55589 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	6.5 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice.
CVE-2025-55590 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	6.5 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html.
CVE-2025-55591 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	9.8 CRITICAL	—
TOTOLINK-A3002R v4.0.0-B20230531.1404 was discovered to contain a command injection vulnerability in the devicemac parameter in the formMapDel endpoint.
CVE-2025-55584 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	5.3 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain insecure credentials for the telnet service and root account.
CVE-2025-55585 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	6.5 MEDIUM	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an eval injection vulnerability via the eval() function.
CVE-2025-55586 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	7.5 HIGH	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the url parameter at /boafrm/formFilter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVE-2025-55587 ↗	Aug 18, 2025Monday, 18 August 2025, 20:15	7.5 HIGH	—
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.