TP-Link-ArcherC5-RCE

TP-Link Archer C5 Authenticated RCE Through Malicious Configuration File Upload CVE-2018-19537 Description An authenticated remote code execution RCE vulnerability exists in all published firmware versions for the TP-Link Archer C5 router. By uploading a maliciously crafted configuration file, an...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC for TP-Link Archer C9 - Admin Password Reset and RCE CVE-2017-11519 See the writeup at https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2026-75616

CVE-2026-75616 Authenticated OS command injection in the TP-Link Archer C20 v6 web management interface. BPA WAN configuration values are passed to system without adequate neutralization, allowing an authenticated administrator on the adjacent network to execute commands as root. Discovered and...

CVE-2026-22226

CVE-2026-22226 CVE-2026-22226에 대한 개념 증명 TP-Link Archer Wi-Fi 라우터 VPN 클라이언트의 인증된 LAN 측 OS 명령 삽입 취약점 개요 VPN 클라이언트 컨트롤러는 사용자가 제어하는 항목 설명des을 약한 검증 정규식을 사용하여 UCI 구성에 저장합니다. 나중에 항목을 다시 읽을 때WebUI에서 편집 중, getovpndata는 des를 인용된 셸 명령에 보간하여 추가 소독 없이 os.execute에 전달합니다: root@kitploit: -- getovpndata in vpn.l...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

CVE-2024-53375

CVE-2024-53375 TP-Link Archer series routers Authenticated OS Command Injection Affected Devices TP-Link devices that use the HomeShield functionality are vulnerable to this exploit. This encompasses multiple routers from the TP-Link Archer series. Tested With Archer AXE75EUV11.2.2 Build 20240827...

TP-LINK - Local File Inclusion

TP-LINK is susceptible to local file inclusion in these products: Archer C5 1.2 with firmware before 150317, Archer C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N...

TP-Link Archer A20 v3 Router - Cross-site Scripting

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2021-44827

CVE-2021-44827 Un PoC per CVE-2021-44827 - esecuzione remota di codice autenticata su Tp-link Archer C20i Write-up: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html Esempio root@kitploit: $ python exploit.py error0 error0 Run postexploitcmd...

TP-Link-Archer-CR-700-XSS-Exploit

TP-Link-Archer-CR-700-XSS-Exploit Sfruttamento del router TP-Link Archer CR-700. Divulgato responsabilmente a TP-Link Passaggio 1- Sulla tua macchina Linux Kali o Ubuntu digita il seguente comando gedit /etc/dhcp/dhclient.conf Commenta la riga qui sotto send host-name = gethostname; Copiala nella...

CVE-2025-27893

CVE-2025-27893: Controllo esterno di parametro web presunto immutabile nella piattaforma Archer Descrizione Nella piattaforma Archer dalla versione 6 alla 6.14.00202.10024, un utente autenticato con privilegi di creazione record può manipolare campi immutabili, come la data di creazione,...

cve-2026-8697

CVE-2026-8697: Bypass del limite di tentativi di accesso su TP-Link Archer C64 CVE-2026-8697 è un difetto logico nel sistema operativo del TP-Link Archer C64 chiamato TPOS nel messaggio di debug. Consente a qualsiasi utente non privilegiato connesso al router di aggirare il limite di tentativi...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Questo strumento sfrutta la vulnerabilità CVE-2022-30075 presente nei router TP-Link Archer AX50 e in alcuni altri modelli TP-Link per eseguire codice in remoto con autenticazione Authenticated Remote Code Execution...

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2023-1389

TP-Link Archer AX21 – Unauthentifizierte Command Injection Loader-POC CVE-2023-1389 Exploit-Titel: TP-Link Archer AX21 – Unauthentifizierte Command Injection Datum gefunden : 07/25/2023 Exploit-Autor: Voyag3r root@kitploit: How to Use :- Scanning - Use Zmap : zmap -p 80 -o list.txt NetCat Listene...

cve-2020-9375

CVE-2020-9375 I dispositivi TP-Link Archer C50 V3 precedenti alla Build 200318 Rel. 62209 consentono a un attaccante remoto di causare un denial of service tramite un'intestazione HTTP manipolata contenente un campo Referer inaspettato. Titolo Exploit : TP-Link Archer C50 v3 Denial of Service Dat...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 Tokyo Edition - TPlink-Exploit Hier sind die Dateien, die verwendet wurden, um den TPlink-Archer-Router während des Pwn2Own 2020 Tokyo auszunutzen. Die Schwachstelle hat die Nummer CVE-2021-27246. Du kannst den Blogbeitrag auf der Synacktiv-Website für die Details überprüfen...

CVE-2026-16348

TP-Link Archer BE800 V1 — RCE autenticato tramite iniezione di chiave VPN CVE: CVE-2026-16348 CVSS: 8.5 Alto — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L Autenticazione richiesta: Credenziali admin valide Posizione di rete: Rete remota se l'interfaccia di gestione è esposta...

CVE-2025-40634

CVE-2025-40634 O roteador TP-Link Archer AX50 é vulnerável a um estouro de buffer baseado em pilha na versão de firmware 1.0.14 Build 20240108 rel.426554555, levando à execução remota de código tanto na LAN quanto na WAN. Essa vulnerabilidade tem a mesma causa raiz do CVE-2020-10881, descoberta...

CVE-2025-15545

CVE-2025-15545 Informações Fornecedor: TP-Link Site do fornecedor: TP-Link Modelo: Archer RE605X Versão de hardware: RE605X v3.0 Versão do firmware: RE605XEUV31.1.5 Build 20240905 Endereço de download do firmware: TP-Link Uma cadeia de vulnerabilidades — incluindo o uso de chaves criptográficas...