TP-Link-defaults

TP-Link-defaults Python script for trying default passwords for some TP-Link Hotspots Inspired by Usage usage: scan.py -h -p -t TIMEOUT Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -p, --print-all print all fou...

Moniker-Link-Lab-Setup

Part of my SOC Analyst portfolio https://github.com/E-m-e-k-a/SOC-Analyst-Portfolio Moniker Link Lab Setup - CVE-2024-21413 🎯 Project Overview Hands-on penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft. This project documents the complete...

CVE-2023-47119

Table of contents CVE-2023-47119 Detailed analysis POC Escalation ? LAB Setup CVE-2023-47119 A POC for CVE-2023-47119 which is a vulnerability affecting Discourse versions prior to version 3.1.3 of the stable branch and version 3.2.0.beta3 of the beta and tests-passed branches. Some links can...

CVE-2026-112062 lwIP through 2.2.1 Stack Out-of-Bounds Write via mDNS Search Response Handler

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdnshandleresponse that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers...

EUVD-2026-103504

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdnshandleresponse that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answers...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

7Ziprowler

7-ZiProwler CVE-2025-11001 Overview Result of my quick research on CVE-2025-11001 are presented in this repo. Exploit is written in python and astral uv project manager. References Some: NIST ZDI CVE News WIZ Quick analysis I will not dig too deep into technical details of this security flaw. If...

CVE-2023-27216

CVE-2023-27216 - DLink Router This document is my personal experience of me - a newbie into firmware reversing and exploiting. Scope For demonstration, we will analyze and reproduce CVE-2023-27216. CVE number: CVE-2023-27216 Vulnerability description: An issue found in D-Link DSL-3782 v.1.03 allo...

CVE-2018-18441-exploit

CVE-2018-18441-exploit D-Link DCS series Wi-Fi cameras expose sensitive information regarding the device configuration. The affected devices include many of DCS series, such as: DCS-936L, DCS-942L, DCS-8000LH, DCS-942LB1, DCS-5222L, DCS-825L, DCS-2630L, DCS-820L, DCS-855L, DCS-2121, DCS-5222LB1,...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

CVE-2021-41653

CVE-2021-41653 TP-Link TL-WR840N EU v5 Remote Code Execution Reference: https://k4m1ll0.com/cve-2021-41653.html...

CVE-2025-47181

CVE-2025-47181 Concept: Microsoft Edge Link Following Privilege Escalation Project Overview This repository presents the CVE-2025-47181 Concept , a Python program designed to illustrate the mechanism and impact of CVE-2025-47181. This is a Privilege Escalation vulnerability in Microsoft Edge...

CVE-2024-21413-POC

CVE-2024-21413 - POC Usage: python CVE-2024-21413.py -host example.com -port 25 -from [email protected] -recipient [email protected] -url xx.xx.xx.xx/path/to/shared/file/r0tb1t.rtf !NOTE r00tb1t : is the shared test file word in this case from the attacker machine xx.xx.xx.xx. To ensure...

CVE-2026-26897-EcoOnline-DeepLink

EcoOnline EHS Android — Deep Link Validation Bypass → WebView Open Redirect CVE-2026-26897 Public disclosure / advisory for CVE-2026-26897 , a deep link validation bypass in the EcoOnline EHS Android application com.airsweb.v10. A crafted ehs-app:// deep link is rewritten to https:// and loaded...

CVE-2021-34767

CVE-2021-34767 Description Cisco IOS XE Software for Catalyst 9800 Series Wireless Controllers IPv6 Denial of Service Vulnerability A vulnerability in IPv6 traffic processing of Cisco IOS XE Wireless Controller Software for Cisco Catalyst 9000 Family Wireless Controllers could allow an...

CVE-2024-10915

CVE-2024-10915 - D-Link NAS Command Injection Exploit This Python-based exploit targets a command injection vulnerability in several D-Link NAS products via the /cgi-bin/accountmgr.cgi?cmd=cgiuseradd endpoint. The vulnerability allows unauthenticated attackers to execute arbitrary system commands...

CVE-2022-25063

CVE-2022-25063 This script exploits a vulnerability XSS in the TPLink WR840N router, using a field for injecting javascript code...

CVE-2023-48842

CVE-2023-48842 Source : D-Link Go-RT-AC750 revAv101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi. https://drive.google.com/file/d/1y5omf2SAhNmcPqDxCSRTvJVAWwPcH/view Little upgrade : I updated the script which is now on steroids, the scrip...

PT-2026-116645

lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns handle response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names. Attackers on the local link can send multicast PTR answers with oversized RDLENGTH or SRV answe...

Linux Distros Unpatched Vulnerability : CVE-2026-98709

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mac80211: count only matching reservations in reserved switch ieee80211vifusereservedswitch validates a replacement by counting assigned links on...