Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Upwork Freelancers vs Dedicated React.js Teams: What’s Better for Your Project in 2025?

      August 1, 2025

      Is Agile dead in the age of AI?

      August 1, 2025

      Top 15 Enterprise Use Cases That Justify Hiring Node.js Developers in 2025

      July 31, 2025

      The Core Model: Start FROM The Answer, Not WITH The Solution

      July 31, 2025

      Error’d: Monkey Business

      August 1, 2025

      Not just YouTube: Google is using AI to guess your age based on your activity – everywhere

      July 31, 2025

      Malicious extensions can use ChatGPT to steal your personal data – here’s how

      July 31, 2025

      What Zuckerberg’s ‘personal superintelligence’ sales pitch leaves out

      July 31, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Write Faster With WordPress’ Shortcodes

      August 1, 2025
      Recent

      Write Faster With WordPress’ Shortcodes

      August 1, 2025

      Build, Run, and Integrate Your Own LLM with Ollama

      August 1, 2025

      How to install IoT platform — Total.js

      August 1, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      When Flatpak’s Sandbox Cracks: Real‑Life Security Issues Beyond the Ideal

      August 1, 2025
      Recent

      When Flatpak’s Sandbox Cracks: Real‑Life Security Issues Beyond the Ideal

      August 1, 2025

      mpd-mpris – MPRIS protocol for MPD

      August 1, 2025

      Rilasciata 4MLinux 49: Distribuzione GNU/Linux Leggera e Versatile

      August 1, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-3996 – TOTOLINK N150RT Cross-Site Scripting Vulnerability

    CVE-2025-3996 – TOTOLINK N150RT Cross-Site Scripting Vulnerability

    April 28, 2025

    CVE ID : CVE-2025-3996

    Published : April 28, 2025, 3:15 a.m. | 5 hours, 13 minutes ago

    Description : A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /home.htm of the component MAC Filtering Page. The manipulation of the argument Comment leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

    Severity: 2.4 | LOW

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-3706 – 104 Corporation eHRMS Reflected Cross-site Scripting Vulnerability
    Next Article CVE-2025-32818 impacts SonicOS SSLVPN

    Related Posts

    Development

    This month in security with Tony Anscombe – July 2025 edition

    August 1, 2025
    Development

    WordPress AI Engine Plugin Bug Allows Remote Code Execution – Update Now

    August 1, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Best GBA Emulators for PC to Download: Top Picks [2025]

    Operating Systems

    These 6 products helped me cut ties with cable – and save $1,200 a year

    News & Updates

    CVE-2025-6953 – TOTOLINK A3002RU HTTP POST Request Handler Buffer Overflow Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-28036 – TOTOLINK A950RG Remote Command Execution Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    Highlights

    CVE-2025-20665 – Samsung Android SELinux Policy Missing Disclosure Vulnerability

    May 4, 2025

    CVE ID : CVE-2025-20665

    Published : May 5, 2025, 3:15 a.m. | 17 minutes ago

    Description : In devinfo, there is a possible information disclosure due to a missing SELinux policy. This could lead to local information disclosure of device identifier with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS09555228; Issue ID: MSV-2760.

    Severity: 0.0 | NA

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    CVE-2025-47240 – Apache Unverified Vulnerability

    May 5, 2025

    CVE-2025-44897 – Fiberhome FW-WGS-804HPT Stack Overflow Vulnerability

    May 20, 2025
    Managed Service Offering (MSO) Support Ticketing System

    Managed Service Offering (MSO) Support Ticketing System

    April 10, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.