CVE-2025-28033 – Totolink Router Pre-Auth Buffer Overflow Vulnerability

April 22, 2025

CVE ID : CVE-2025-28033

Published : April 22, 2025, 2:15 p.m. | 22 minutes ago

Description : TOTOLINK A800R V4.1.2cu.5137_B20200730, A810R V4.1.2cu.5182_B20201026, A830R V4.1.2cu.5182_B20201102, A950RG V4.1.2cu.5161_B20200903, A3000RU V5.9c.5185_B20201128, and A3100R V4.1.2cu.5247_B20211129 were found to contain a pre-auth buffer overflow vulnerability in the setNoticeCfg function through the IpTo parameter.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-28034 – TOTOLINK Router Pre-Auth Remote Command Execution Vulnerability

Next Article CVE-2025-28032 – TOTOLINK Router Pre-Auth Buffer Overflow Vulnerability

Highlights

CVE-2025-5646 – “Radare2 Rainbow Free Memory Corruption Vulnerability”

June 5, 2025

CVE ID : CVE-2025-5646

Published : June 5, 2025, 8:15 a.m. | 3 hours, 25 minutes ago

Description : A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The patch is identified as 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and “crashy”. Further analysis has shown “the race is not a real problem unless you use asan”. A new warning has been added.

Severity: 2.5 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CVE-2025-3981 – “Wowjoy Internet Doctor Workstation System Remote Unauthorized Access Vulnerability”

April 27, 2025

CVE-2025-46193 – SourceCodester Client Database Management System Remote Code Execution Vulnerability

May 9, 2025

Improve conversational AI response times for enterprise applications with the Amazon Bedrock streaming API and AWS AppSync

July 9, 2025

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

5 preinstalled apps you should delete from your Samsung phone immediately

Ubuntu Linux lagging? Try my 10 go-to tricks to speed it up

How I survived a week with this $130 smartwatch instead of my Garmin and Galaxy Ultra

YouTube is using AI to verify your age now – and if it’s wrong, that’s on you to fix

Time-Controlled Data Processing with Laravel LazyCollection Methods

Time-Controlled Data Processing with Laravel LazyCollection Methods

Create Apple Wallet Passes in Laravel

The Laravel Idea Plugin is Now FREE for PhpStorm Users

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

New data shows Xbox is utterly dominating PlayStation’s storefront — accounting for 60% of the Q2 top 10 game sales spots

Opera throws Microsoft to Brazil’s watchdogs for promoting Edge as your default browser — “Microsoft thwarts‬‭ browser‬‭ competition‬‭‬‭ at‬‭ every‬‭ turn”

Activision once again draws the ire of players for new Diablo Immortal marketing that appears to have been made with generative AI

CVE-2025-28033 – Totolink Router Pre-Auth Buffer Overflow Vulnerability

CVE-2025-43234 – Apple WatchOS/IOS/iPadOS/tvOS/macOS VisionOS Texture Corruption Vulnerability

CVE-2025-43237 – Apple macOS Sequoia Write Access Vulnerability

CVE-2025-6794 – Marvell QConvergeConsole Directory Traversal Remote Code Execution Vulnerability

Microsoft 365 Copilot Just Got Smarter with Memory and Instruction Controls

CVE-2025-5536 – Freemind Viewer Stored Cross-Site Scripting

CVE-2025-39240 – Hikvision Wireless Access Point Authenticated Remote Command Execution Vulnerability

CVE-2025-5646 – “Radare2 Rainbow Free Memory Corruption Vulnerability”

CVE-2025-3981 – “Wowjoy Internet Doctor Workstation System Remote Unauthorized Access Vulnerability”

CVE-2025-46193 – SourceCodester Client Database Management System Remote Code Execution Vulnerability

Improve conversational AI response times for enterprise applications with the Amazon Bedrock streaming API and AWS AppSync

CVE-2025-28033 – Totolink Router Pre-Auth Buffer Overflow Vulnerability

Related Posts