CVE-2025-6299 – TOTOLINK N150RT Os Command Injection Vulnerability

June 20, 2025

CVE ID : CVE-2025-6299

Published : June 20, 2025, 3:15 a.m. | 3 hours, 26 minutes ago

Description : A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boa/formWSC. The manipulation of the argument targetAPSsid leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 4.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6301 – PHPGurukul Notice Board System Cross-Site Scripting Vulnerability

Next Article CVE-2025-6303 – Code-projects Online Shoe Store SQL Injection Vulnerability

This week in AI dev tools: Gemini 2.5 Pro and Flash GA, GitHub Copilot Spaces, and more (June 20, 2025)

Gemini 2.5 Pro and Flash are generally available and Gemini 2.5 Flash-Lite preview is announced

CSS Cascade Layers Vs. BEM Vs. Utility Classes: Specificity Control

IBM launches new integration to help unify AI security and governance

One of World of Warcraft’s deadliest entities makes a world-shattering return after nearly 20 years — and he’s city-sized

It feels like Blizzard has abandoned Diablo 2: Resurrected — but there’s one way to keep it alive for years to come

Steam’s performance tracking tool is becoming more like the Steam Deck’s — you can try it out right now

Borderlands 4 is killing off a tired “FOMO” trend — I hope other developers follow suit

Dr. Axel’s JavaScript flashcards

Dr. Axel’s JavaScript flashcards

Syntax-Highlight – Custom Element For Syntax Highlighting Content

WelsonJS – Build a Windows app on the Windows built-in JavaScript engine

One of World of Warcraft’s deadliest entities makes a world-shattering return after nearly 20 years — and he’s city-sized

One of World of Warcraft’s deadliest entities makes a world-shattering return after nearly 20 years — and he’s city-sized

It feels like Blizzard has abandoned Diablo 2: Resurrected — but there’s one way to keep it alive for years to come

Steam’s performance tracking tool is becoming more like the Steam Deck’s — you can try it out right now

CVE-2025-6299 – TOTOLINK N150RT Os Command Injection Vulnerability

CVE-2025-49763: Apache Traffic Server Vulnerability Enables Memory Exhaustion Attacks

IBM QRadar SIEM Exposed by Trio of Security Flaws, Including Critical Command Execution Bug

Distribution Release: Rocky Linux 10.0

CVE-2025-4464 – iSourcecode Gym Management System SQL Injection Vulnerability

Kagi’s Orion Browser Linux Port Uses GTK4/libadwaita

Salesforce tags 5 CVEs after SaaS security probe uncovers misconfig risks

CVE-2025-27007: Critical OttoKit WordPress Plugin Flaw Exploited After Disclosure, 100K+ Sites at Risk

CVE-2025-5685 – Tenda CH22 Stack-Based Buffer Overflow Vulnerability

CVE-2025-44892 – Fortinet Wireless Access Point Stack Overflow Vulnerability

CVE-2025-33024 – RUGGEDCOM ROX Command Injection Vulnerability

CVE-2025-6299 – TOTOLINK N150RT Os Command Injection Vulnerability

Related Posts