Lucene search
+L

4882 matches found

Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.15 views

PT-2024-7091 · Tp Link · Tp-Link Tl-Wdr7660

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WDR7660 version 1.0 Description: The issue is related to the wlanTimerRuleJsonToBin function, which handles input data without proper size validation, potentially leading to a stack overflow. This can be exploited by a remote...

6.5CVSS7.2AI score0.0038EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/10/08 12:00 a.m.18 views

PT-2024-7093 · Tp Link · Tp-Link Tl-Wdr7660

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WDR7660 version 1.0 Description: The issue is related to the wacWhitelistJsonToBin function, which handles the string name parameter without proper checking, potentially leading to stack overflow vulnerabilities. This can be...

6.5CVSS7.7AI score0.0038EPSS
SaveExploits1References8
NVD
NVD
added 2024/10/07 1:15 p.m.44 views

CVE-2024-46325

TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url...

5.5CVSS0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/10/07 12:00 a.m.38 views

CVE-2024-46325

TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url...

0.00239EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/10/07 12:00 a.m.13 views

CVE-2024-46325

TP-Link WR740N V6 has a stack overflow vulnerability via the ssid parameter in /userRpm/popupSiteSurveyRpm.htm url...

7.6AI score0.00239EPSS
SaveExploits0References1
CVE
CVE
added 2024/10/07 12:00 a.m.105 views

CVE-2024-46325

TP-Link WR740N V6 is affected by a stack overflow in the ssid parameter of /userRpm/popupSiteSurveyRpm.htm. Root cause is a boundary/input handling issue in that URL path, leading to potential remote code execution or denial of service as described by CNVD/CNNVD and corroborated by Red Hat and CV...

5.5CVSS7.4AI score0.00239EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2024/10/04 5:15 p.m.31 views

CVE-2024-46486

TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution RCE vulnerability via the httpProcDataSrv function...

8CVSS0.00816EPSS
SaveExploits1References2
GithubExploit
GithubExploit
added 2024/10/04 12:49 p.m.456 views

Exploit for CVE-2024-53375

CVE-2024-53375 TP-Link Archer series routers Authenticated OS...

8CVSS7.8AI score0.40467EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2024/10/04 12:00 a.m.12 views

CVE-2024-46486

TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution RCE vulnerability via the httpProcDataSrv function...

8.3AI score0.00816EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/10/04 12:00 a.m.27 views

CVE-2024-46486

TP-LINK TL-WDR5620 v2.3 was discovered to contain a remote code execution RCE vulnerability via the httpProcDataSrv function...

0.00816EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/10/04 12:00 a.m.9 views

TP-LINK TL-WDR5620 安全漏洞

TP-LINK TL-WDR5620 is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-LINK TL-WDR5620 version 2.3, which originates from a remote code execution vulnerability contained in the httpProcDataSrv function...

8CVSS8.1AI score0.00816EPSS
SaveExploits1References3
CVE
CVE
added 2024/10/04 12:00 a.m.78 views

CVE-2024-46486

TP-LINK TL-WDR5620 v2.3 is affected by a remote code execution (RCE) vulnerability in the httpProcDataSrv function. The issue stems from insufficient input handling in httpProcDataSrv, allowing an attacker to craft inputs that trigger arbitrary code execution. Impact is remote attacker access wit...

8CVSS8.4AI score0.00816EPSS
SaveExploits1References2Affected Software1
NVD
NVD
added 2024/09/30 6:15 p.m.44 views

CVE-2024-35495

An Information Disclosure vulnerability in the Telemetry component in TP-Link Kasa KP125M V1.0.0 and Tapo P125M 1.0.0 Build 220930 Rel.143947 allows attackers to observe device state via observing network traffic...

4.3CVSS0.00197EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/30 5:15 p.m.20 views

CVE-2024-46548

TP-Link Tapo P125M and Kasa KP125M v1.0.3 was discovered to improperly validate certificates, allowing attackers to eavesdrop on communications and access sensitive information via a man-in-the-middle attack...

6.3CVSS0.00163EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/30 5:15 p.m.36 views

CVE-2024-46549

An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users...

7.6CVSS0.00361EPSS
SaveExploits0References1
NVD
NVD
added 2024/09/30 3:15 p.m.22 views

CVE-2024-46313

TP-Link WR941ND V6 has a stack overflow vulnerability in the ssid parameter in /userRpm/popupSiteSurveyRpm.htm...

8CVSS0.02362EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/09/30 12:00 a.m.26 views

CVE-2024-35495

An Information Disclosure vulnerability in the Telemetry component in TP-Link Kasa KP125M V1.0.0 and Tapo P125M 1.0.0 Build 220930 Rel.143947 allows attackers to observe device state via observing network traffic...

0.00197EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/09/30 12:00 a.m.14 views

TP-LINK Kasa KP125M 安全漏洞

TP-LINK Kasa KP125M is a smart plug from China P&L TP-LINK. A security vulnerability exists in the TP-Link Kasa KP125M v1.0.3, which stems from an issue in the API gateway that can be exploited by an attacker to establish a connection by impersonating a device owned by another user...

7.6CVSS6.7AI score0.00361EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/30 12:00 a.m.42 views

CVE-2024-46549

An issue in the TP-Link MQTT Broker and API gateway of TP-Link Kasa KP125M v1.0.3 allows attackers to establish connections by impersonating devices owned by other users...

0.00361EPSS
SaveExploits0References1
CVE
CVE
added 2024/09/30 12:00 a.m.103 views

CVE-2024-46549

CVE-2024-46549 affects TP-Link Kasa KP125M v1.0.3 via the TP-Link MQTT Broker and API gateway. The issue permits impersonation of other users’ devices to establish connections, with confidentiality and integrity impact (C/H; I/H) and user interaction required. Evidence from multiple sources confi...

7.6CVSS7AI score0.00361EPSS
SaveExploits0References1
Rows per page
Query Builder