<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: hootoo</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2018-20841: HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command exe</title><link>https://patchthecve.com/cve/CVE-2018-20841.html</link><guid>https://patchthecve.com/cve/CVE-2018-20841.html</guid><pubDate>Wed, 17 Jun 2026 01:53:34 +0000</pubDate><description>CRITICAL 9.8: HooToo TripMate Titan HT-TM05 and HT-05 routers with firmware 2.000.022 and 2.000.082 allow remote command execution via shell metacharacters in the mac parameter of a protocol.csp?function=set&amp;fname=security&amp;opt=mac_table request.</description></item><item><title>CVE-2017-9026: Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows </title><link>https://patchthecve.com/cve/CVE-2017-9026.html</link><guid>https://patchthecve.com/cve/CVE-2017-9026.html</guid><pubDate>Wed, 17 Jun 2026 01:27:21 +0000</pubDate><description>CRITICAL 9.8: Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.</description></item><item><title>CVE-2017-9025: Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows r</title><link>https://patchthecve.com/cve/CVE-2017-9025.html</link><guid>https://patchthecve.com/cve/CVE-2017-9025.html</guid><pubDate>Wed, 17 Jun 2026 01:27:21 +0000</pubDate><description>MEDIUM 6.5: Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header.</description></item></channel></rss>