CVE-2022-25064

CVE-2022-25064 RCE en TP-LINK TL-WR840N a través de la función oalwan6setIpAddr PoC root@kitploit: POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3...

CVE-2018-12633-TPLink-Auth-Bypass

CVE-2018-12633-TPLink-Auth-Bypass Un estudio de caso técnico y análisis de explotación de la vulnerabilidad de omisión de autenticación en el firmware TP-Link TL-WR840N CVE-2018-12633. Análisis de Vulnerabilidad: TP-Link TL-WR840N Authentication Bypass CVE-2018-12633 ⚠️ Descargo de responsabilidad...

CVE-2021-41653

CVE-2021-41653 TP-Link TL-WR840N EU v5 远程代码执行 参考：https://k4m1ll0.com/cve-2021-41653.html...

cve-2018-11714_POC

cve-2018-11714POC 在 TP-Link TL-WR840N 上发现了一个问题。该问题是由 /cgi/ 文件夹或 /cgi 文件的不当会话处理引起的。如果攻击者发送带有 "Referer: http://192.168.0.1/mainFrame.htm" 的标头，则任何操作都无需身份验证。 文章 pt-br: https://nous.sidneypepo.com/router2025.html...

CVE-2026-3227

Technical details beyond the brief description are not provided in the supplied documents. Monitor for updates on affected devices and firmware.

CVE-2026-3227

A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file...

CVE-2026-3227 Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N

A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file...

CVE-2022-26641

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter...

CVE-2022-26642

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the XTPClonedMACAddress parameter...

CVE-2019-12195

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...

VulnCheck KEV: CVE-2018-11714

An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of...

EUVD-2019-3843

Malware in sbrugna...

EUVD-2022-31194

Malicious code in bioql PyPI...

EUVD-2021-32822

Malicious code in bioql PyPI...

EUVD-2022-33741

Malicious code in bioql PyPI...

EUVD-2022-31193

Malicious code in bioql PyPI...

CVE-2022-29402

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication...

CVE-2022-26640

TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the minAddress parameter...

CVE-2022-25060

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalstartPing...

CVE-2022-25061

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalsetIp6DefaultRoute...