CVE-2023-1389

الوصف CVE-2023–1389 هي ثغرة حقن أوامر غير موثقة Unauthenticated Command Injection في جهاز التوجيه TP-Link Archer AX21 WiFi. يستخدم استدعاء callback في معامل country دالة popen ، والتي تعمل بصلاحيات الجذر root، مما يسمح للمهاجم بحقن قيم عشوائية من خلال طلبات GET أو POST إلى واجهة الإدارة، دون الحا...

CVE-2024-53375

CVE-2024-53375 حقن أوامر نظام التشغيل بعد المصادقة في أجهزة توجيه سلسلة TP-Link Archer الأجهزة المتأثرة أجهزة TP-Link التي تستخدم وظيفة HomeShield معرضة لهذا الاستغلال. يشمل ذلك عدة أجهزة توجيه من سلسلة TP-Link Archer. تم الاختبار باستخدام Archer AXE75EUV11.2.2 Build 20240827 تاريخ النشر: 4 نوفمب...

TP-Link Archer A20 v3 Router - Cross-site Scripting

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2021-44827

CVE-2021-44827 Un PoC per CVE-2021-44827 - esecuzione remota di codice autenticata su Tp-link Archer C20i Write-up: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html Esempio root@kitploit: $ python exploit.py error0 error0 Run postexploitcmd...

CVE-2026-22226

CVE-2026-22226 CVE-2026-22226 के लिए प्रूफ ऑफ कॉन्सेप्ट TP-Link Archer वाई-फाई राउटर्स के VPN क्लाइंट में प्रमाणित LAN-साइड OS कमांड इंजेक्शन भेद्यता संक्षिप्त VPN क्लाइंट कंट्रोलर उपयोगकर्ता-नियंत्रित एंट्री विवरण des को कमजोर सत्यापन रेगेक्स के साथ UCI कॉन्फ़िगरेशन में संग्रहीत करता है। जब बाद...

cve-2026-8697

CVE-2026-8697: Bypass del limite di tentativi di accesso su TP-Link Archer C64 CVE-2026-8697 è un difetto logico nel sistema operativo del TP-Link Archer C64 chiamato TPOS nel messaggio di debug. Consente a qualsiasi utente non privilegiato connesso al router di aggirare il limite di tentativi...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 RCE autenticata tramite caricamento di file di configurazione dannoso CVE-2018-19537 Descrizione Una vulnerabilità di remote code execution RCE autenticata esiste in tutte le versioni firmware pubblicate per il router TP-Link Archer C5. Caricando un file di configurazione creato...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Questo strumento sfrutta la vulnerabilità CVE-2022-30075 presente nei router TP-Link Archer AX50 e in alcuni altri modelli TP-Link per eseguire codice in remoto con autenticazione Authenticated Remote Code Execution...

CVE-2026-80712 spi: spi-qpic-snand: write the feature value before executing SET_FEATURE

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which makes the controller execute the command immediately. For...

CVE-2023-1389

TP-Link Archer AX21 – Unauthentifizierte Command Injection Loader-POC CVE-2023-1389 Exploit-Titel: TP-Link Archer AX21 – Unauthentifizierte Command Injection Datum gefunden : 07/25/2023 Exploit-Autor: Voyag3r root@kitploit: How to Use :- Scanning - Use Zmap : zmap -p 80 -o list.txt NetCat Listene...

tplink-CVE-2017-11519

tplink-CVE-2017-11519 POC per TP-Link Archer C9 - Reset della password amministratore e RCE CVE-2017-11519 Vedi il writeup su https://devcraft.io/posts/2017/07/21/tp-link-archer-c9-admin-password-reset.html...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 Tokyo Edition - TPlink-Exploit Hier sind die Dateien, die verwendet wurden, um den TPlink-Archer-Router während des Pwn2Own 2020 Tokyo auszunutzen. Die Schwachstelle hat die Nummer CVE-2021-27246. Du kannst den Blogbeitrag auf der Synacktiv-Website für die Details überprüfen...

CVE-2026-16348

TP-Link Archer BE800 V1 — RCE autenticato tramite iniezione di chiave VPN CVE: CVE-2026-16348 CVSS: 8.5 Alto — CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L Autenticazione richiesta: Credenziali admin valide Posizione di rete: Rete remota se l'interfaccia di gestione è esposta...

CVE-2025-40634

CVE-2025-40634 O roteador TP-Link Archer AX50 é vulnerável a um estouro de buffer baseado em pilha na versão de firmware 1.0.14 Build 20240108 rel.426554555, levando à execução remota de código tanto na LAN quanto na WAN. Essa vulnerabilidade tem a mesma causa raiz do CVE-2020-10881, descoberta...

CVE-2020-10882

Links de referência https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-75616

CVE-2026-75616 TP-Link Archer C20 v6 वेब प्रबंधन इंटरफ़ेस में प्रमाणित OS कमांड इंजेक्शन। BPA WAN कॉन्फ़िगरेशन मान पर्याप्त न्यूट्रलाइज़ेशन के बिना system को पास किए जाते हैं, जिससे आसन्न नेटवर्क पर एक प्रमाणित व्यवस्थापक रूट के रूप में कमांड निष्पादित कर सकता है। Daniil Gordeev totekuh द्वारा खो...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...