CVE-2025-6939 – TOTOLINK A3002RU HTTP POST Request Handler Buffer Overflow

June 30, 2025

CVE ID : CVE-2025-6939

Published : July 1, 2025, 3:15 a.m. | 17 minutes ago

Description : A vulnerability classified as critical has been found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formWlSiteSurvey of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-6940 – TOTOLINK A702R HTTP POST Request Handler Buffer Overflow Vulnerability

Next Article CVE-2025-53095 – Sunshine/Moonlight CSRF to RCE

Highlights

CVE-2025-54594 – React Native Bottom Tabs GitHub Actions Code Execution

August 6, 2025

CVE ID : CVE-2025-54594

Published : Aug. 6, 2025, 12:15 a.m. | 23 hours, 29 minutes ago

Description : react-native-bottom-tabs is a library of Native Bottom Tabs for React Native. In versions 0.9.2 and below, the github/workflows/release-canary.yml GitHub Actions repository workflow improperly used the pull_request_target event trigger, which allowed for untrusted code from a forked pull request to be executed in a privileged context. An attacker could create a pull request containing a malicious preinstall script in the package.json file and then trigger the vulnerable workflow by posting a specific comment (!canary). This allowed for arbitrary code execution, leading to the exfiltration of sensitive secrets such as GITHUB_TOKEN and NPM_TOKEN, and could have allowed an attacker to push malicious code to the repository or publish compromised packages to the NPM registry. There is a remediation commit which removes github/workflows/release-canary.yml, but a version with this fix has yet to be released.

Severity: 9.1 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

The Psychology Of Color In UX Design And Digital Products

This week in AI dev tools: Claude Sonnet 4’s larger context window, ChatGPT updates, and more (August 15, 2025)

Sentry launches MCP monitoring tool

10 Benefits of Hiring a React.js Development Company (2025–2026 Edition)

I flew Insta360’s new ‘Antigravity’ drone around Los Angeles, and it was impossible to miss a shot

The $100 open-ear headphones that made me forget about my Shokz

5 quick and simple ways to greatly improve the quality of your headphones

Installing a UPS battery backup saved my work PC – here’s the full story

Maintaining Data Consistency with Laravel Database Transactions

Maintaining Data Consistency with Laravel Database Transactions

Building a Multi-Step Form With Laravel, Livewire, and MongoDB

Inertia Releases a New Form Component

Google’s Gemini AI had a full-on meltdown while coding — calling itself a fool, a disgrace, and begging for freedom from its own loop

Google’s Gemini AI had a full-on meltdown while coding — calling itself a fool, a disgrace, and begging for freedom from its own loop

Take-Two hints at $100 price tag for Grand Theft Auto VI — will it deliver on value?

ChatGPT Go offers GPT-5, image creation, and longer memory — all for $5 (if you’re lucky enough to live where it’s available)

CVE-2025-6939 – TOTOLINK A3002RU HTTP POST Request Handler Buffer Overflow

Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

Zero Trust + AI: Privacy in the Age of Agentic AI

CVE-2025-45986 – Blink Command Injection Vulnerability in Router SetMacBlack Function

Microsoft Edge Rolls Out AI-Powered History Search with Privacy Focus

With Copilot Studio’s new skill, your AI agent can use websites and apps just like you do

Better defaults for your Laravel applications with Essentials

CVE-2025-54594 – React Native Bottom Tabs GitHub Actions Code Execution

Deena Piquion from Xerox on Data, Disruption, and Digital Natives

APT-Style Attacks Exploit CVE-2025-6543 in Dutch Critical Organizations

CVE-2025-6270 – HDF5 Heap-Based Buffer Overflow Vulnerability

CVE-2025-6939 – TOTOLINK A3002RU HTTP POST Request Handler Buffer Overflow

Related Posts