CVE-2025-5903 – TOTOLINK T10 Buffer Overflow in POST Request Handler

June 9, 2025

CVE ID : CVE-2025-5903

Published : June 10, 2025, 12:15 a.m. | 1 hour, 23 minutes ago

Description : A vulnerability was found in TOTOLINK T10 4.1.8cu.5207. It has been classified as critical. Affected is the function setWiFiAclRules of the file /cgi-bin/cstecgi.cgi of the component POST Request Handler. The manipulation of the argument desc leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-5904 – TOTOLINK T10 Buffer Overflow in POST Request Handler

Next Article CVE-2025-0037 – AMD Versal Adaptive SoC PLM Firmware Memory Access Vulnerability

Highlights

CVE-2025-6527 – “70mai M300 Web Server Local Network Access Control Vulnerability”

June 23, 2025

CVE ID : CVE-2025-6527

Published : June 23, 2025, 10:15 p.m. | 3 hours, 46 minutes ago

Description : A vulnerability, which was classified as problematic, was found in 70mai M300 up to 20250611. Affected is an unknown function of the component Web Server. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 3.1 | LOW

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Ultimate Guide to Node.js Development Pricing for Enterprises

Stack Overflow: Developers’ trust in AI outputs is worsening year over year

Web Components: Working With Shadow DOM

Google’s new Opal tool allows users to create mini AI apps with no coding required

I replaced my Samsung OLED TV with this Sony Mini LED model for a week – and didn’t regret it

I tested the most popular robot mower on the market – and it was a $5,000 crash out

5 gadgets and accessories that leveled up my gaming setup (including a surprise console)

Why I’m patiently waiting for the Samsung Z Fold 8 next year (even though the foldable is already great)

Performance Analysis with Laravel’s Measurement Tools

Performance Analysis with Laravel’s Measurement Tools

Memoization and Function Caching with this PHP Package

Laracon US 2025 Livestream

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

Microsoft mysteriously offered a Windows 11 upgrade to this unsupported Windows 10 PC — despite it failing to meet the “non-negotiable” TPM 2.0 requirement

With Windows 10’s fast-approaching demise, this Linux migration tool could let you ditch Microsoft’s ecosystem with your data and apps intact — but it’s limited to one distro

Windows 10 is 10 years old today — let’s look back at 10 controversial and defining moments in its history

CVE-2025-5903 – TOTOLINK T10 Buffer Overflow in POST Request Handler

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

Tea App Data Breach: 72,000 Selfies and IDs of Women Leaked Online

CVE-2025-3860 – CarDealerPress for WordPress Stored Cross-Site Scripting Vulnerability

High-risk WinRAR RCE vulnerability patched, update quickly! (CVE-2025-6218)

CVE-2025-20323 – Splunk Enterprise Missing Access Control Vulnerability

Our 20 Recommended Software Development Tools for 2025

CVE-2025-6527 – “70mai M300 Web Server Local Network Access Control Vulnerability”

Google is intentionally throttling YouTube videos, slowing down users with ad blockers

CVE-2025-47949 – Samlify SAML Response Signature Wrapping Vulnerability

How Agile Helps You Improve Your Agility

CVE-2025-5903 – TOTOLINK T10 Buffer Overflow in POST Request Handler

Related Posts