Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Search Results: "cstecgi.cgi"
Click on any threat for detailed analysis and mitigation recommendations
0 A vulnerability has been found in TOTOLINK X5000R 9.1.0cu.2089_B20211224. The impacted element is the function exportOvpn of the file /cgi-bin/cstecgi.cgi?action=exportOvpn&type=user of the component Export Ovpn Handler. The manipulation of the argument filetype leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Join the discussion | CVE Database V5 | 09/15/2026, 16:15:08 UTC Added: 09/15/2026, 16:17:06 UTC |
0 A vulnerability was found in TOTOLINK CP450 4.1.0. The impacted element is an unknown function of the file /cgi-bin/cstecgi.cgi. Performing a manipulation of the argument topicurl results in buffer overflow. Remote exploitation of the attack is possible. Join the discussion | CVE Database V5 | 09/03/2026, 02:00:13 UTC Added: 09/03/2026, 02:22:41 UTC |
An incorrect access control vulnerability exists in the discoverWan function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. This flaw allows unauthenticated attackers to trigger the WAN discovery logic by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. The vulnerability has a CVSS 3.1 base score of 5.9, indicating a medium severity level with high confidentiality impact but no integrity or availability impact. Join the discussion | GCVE Database | 09/01/2026, 15:31:07 UTC Added: 09/02/2026, 15:49:33 UTC |
0 Incorrect access control in the discoverWan function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to trigger WAN discovery logic via sending a crafted POST request to /cgi-bin/cstecgi.cgi. Join the discussion | CVE Database V5 | 09/01/2026, 00:00:00 UTC Added: 09/01/2026, 13:22:42 UTC |
0 Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi. Join the discussion | CVE Database V5 | 09/01/2026, 00:00:00 UTC Added: 09/01/2026, 13:22:42 UTC |
An incorrect access control vulnerability exists in the CloudSrvVersionCheck function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. This flaw allows unauthenticated attackers to trigger cloud update checks by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Join the discussion | GCVE Database | 08/31/2026, 21:32:11 UTC Added: 09/02/2026, 15:49:33 UTC |
An incorrect access control vulnerability exists in the setApWiFiSchCfg function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. This flaw allows unauthenticated attackers to modify wireless availability windows by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability has a CVSS 3.1 base score of 5.9, indicating a medium severity level. Join the discussion | GCVE Database | 08/31/2026, 18:31:29 UTC Added: 09/02/2026, 15:49:33 UTC |
An incorrect access control vulnerability exists in the setRoamingCfg function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. This flaw allows unauthenticated attackers to modify the device's roaming behavior by sending a specially crafted POST request to /cgi-bin/cstecgi.cgi. The vulnerability has a CVSS score of 5.9, indicating a medium severity level. Join the discussion | GCVE Database | 08/31/2026, 18:31:29 UTC Added: 09/02/2026, 15:49:33 UTC |
An incorrect access control vulnerability exists in the setWiFiEasyGuestCf function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. This flaw allows unauthenticated attackers to create or weaken guest wireless access by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint. Join the discussion | GCVE Database | 08/31/2026, 15:34:46 UTC Added: 08/31/2026, 17:50:56 UTC |
An incorrect access control vulnerability exists in the setWiFiGuestCfg function of TOTOLINK T6 firmware version 4.1.5cu.748_B20211015. This flaw allows unauthenticated attackers to send crafted POST requests to the /cgi-bin/cstecgi.cgi endpoint to establish or weaken guest wireless access settings without proper authorization. Join the discussion | GCVE Database | 08/31/2026, 15:34:46 UTC Added: 08/31/2026, 17:50:54 UTC |
Showing 1 to 10 of 472 results