CVE-2025-6165 – TOTOLINK X15 HTTP POST Request Handler Buffer Overflow Vulnerability

June 17, 2025

CVE ID : CVE-2025-6165

Published : June 17, 2025, 6:15 a.m. | 2 hours, 44 minutes ago

Description : A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6166 – Frdel Agent-Zero Path Traversal Vulnerability

Next Article CVE-2025-6164 – TOTOLINK A3002R HTTP POST Request Handler Buffer Overflow Vulnerability

Newest LF Decentralized Trust Lab HOPrS identifies if photos have been altered

Coder reimagines development environments to make them more ideal for AI agents

Report: AI coding productivity gains cancelled out by other friction points that slow developers down

15 Proven Benefits of Outsourcing Node.js Development for Large Organizations

How passkeys work: Do your favorite sites even support passkeys?

Samsung Galaxy Z Fold 7 vs. Z Fold 6: I tried both phones, and the difference is dramatic

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Cally – Small, feature-rich calendar components

Cally – Small, feature-rich calendar components

Working with the Command Line and WP-CLI

Access to Care Is Evolving: What Consumer Insights and Behavior Models Reveal

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Cor, blimey! The ASUS ROG Ally drops to its lowest-ever price for Amazon Prime Day in the UK — the only Windows handheld to permanently replace my Steam Deck

Owlcat Games talks to us about about WH40K: Rogue Trader, the next game ‘Dark Heresy’ — and how the studio feels about working with Xbox Game Pass

Microsoft says ‘we have threads at home’ — rolls out feature Slack has had for years

CVE-2025-6165 – TOTOLINK X15 HTTP POST Request Handler Buffer Overflow Vulnerability

CVE-2025-3497 – Radiflow iSAP Smart Collector EOL Vulnerability

CVE-2025-3498 – Radiflow iSAP Smart Collector Unauthenticated Remote Command Execution and Configuration Modification

The Witcher 3: Wild Hunt reaches 60 million copies sold as work continues on The Witcher 4

CVE-2025-28971 – CWD Web Designer Easy Elements Hider Cross-site Scripting Vulnerability

CVE-2025-6172 – Boomplayer Unauthenticated Remote Code Execution

Gemma Scope: helping the safety community shed light on the inner workings of language models

Ubuntu 24.04 LTS Adds Power Warnings for EU Compliance

CVE-2025-44043 – Keyoti SearchUnit SSRF

CVE-2025-4479 – ElementsKit Elementor Addons and Templates WordPress Stored Cross-Site Scripting

Windows 11 will let you change on-screen indicators position, like volume flyout

CVE-2025-6165 – TOTOLINK X15 HTTP POST Request Handler Buffer Overflow Vulnerability

Related Posts