CVE-2025-6953

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in TOTOLINK A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formParentControl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jul 1, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-695347.5Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandlCVE-2025-69549.8A vulnerability has been found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this vulnerability is an CVE-2025-695429.8A Command Injection Vulnerability has been discovered in the DHCP daemon service of D-Link DIR895LA1 v102b07. The vulnerability exists in thCVE-2025-69559.8A vulnerability was found in Campcodes Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown funCVE-2025-695599.8code-projects Computer Book Store 1.0 is vulnerable to File Upload in admin_add.php.CVE-2025-69569.8A vulnerability was found in Campcodes Employee Management System 1.0. It has been classified as critical. This affects an unknown part of tCVE-2025-695629.8code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /insertmessage.php via the userid parameter.CVE-2025-695639.8code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExLogin.php via the Password parameter.CVE-2025-695649.8code-projects Mobile Shop Management System 1.0 is vulnerable to SQL Injection in /ExAddNewUser.php via the Name, Address, email, UserName, CVE-2025-695659.8code-projects Mobile Shop Management System 1.0 is vulnerable to File Upload in /ExAddProduct.php.CVE-2025-69579.8A vulnerability was found in Campcodes Employee Management System 1.0. It has been declared as critical. This vulnerability affects unknown CVE-2025-69589.8A vulnerability was found in Campcodes Employee Management System 1.0. It has been rated as critical. This issue affects some unknown proces
CVE-2025-6953: High severity, CVSS 8.8 | Vulnix