CVEs-PoC/2022/CVE-2022-25084.md

CVE-2022-25084

Description

TOTOLink T6 V5.9c.4085_B20190428 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING parameter.

POC

Reference

• https://github.com/EPhaha/IOT_vuln/blob/main/TOTOLink/T6/README.md

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ArrestX/--POC
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Threekiii/Awesome-POC
• https://github.com/d4n-sec/d4n-sec.github.io