CVE-2018-17016

The CVE-2018-17016 issue affects the TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). The vulnerability allows authenticated attackers to crash router services (including inetd, HTTP, DNS, and UPnP) by sending long JSON data targeting the reboot_timer field. The connected sources pro...

CVE-2018-17005

CVE-2018-17005 affects TP-Link TL-WR886N devices (6.0 2.3.4 and 7.0 1.1.0). The issue is a crash in router services (inetd, HTTP, DNS, UPnP) triggered by long JSON data for firewall dmz enable. Multiple feeds (NVD, RH, CNVD, CNVD) corroborate this denial-of-service behavior. The connected documen...

CVE-2018-17018

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for timeswitch name...

CVE-2018-17014

The CVE-2018-17014 issue affects TP-Link TL-WR886N devices in 6.0 2.3.4 and 7.0 1.1.0 revisions. Authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending excessively long JSON data in the ip_mac_bind field. The connected sources corroborate the same description across...

CVE-2018-17011

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for hostsinfo para sun...

CVE-2018-17006

This entry concerns TP-Link TL-WR886N devices (firmware 6.0 2.3.4 and 7.0 1.1.0) where authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data to the firewall lan_manage mac2. The vulnerability is triggered by crafted input that overwhelms service hand...

CVE-2018-17006

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for firewall lanmanage mac2...

TP-Link File Disclosure Vulnerability

Multiple TP-Link devices are prone to a file disclosure vulnerability where an unauthenticated attacker may obtain the configuration backup file which may contain sensitive data e.g. admin password which could lead to complete compromise of the device. Copyright C 2018 Greenbone Networks GmbH Som...

Rogue Access Point Toolkit : hostapd-mana

hostapd-mana is a featureful rogue wifi access point tool. It can be used for a myriad of purposes from tracking and deanonymising devices aka Snoopy, gathering corporate credentials from devices attempting EAP aka WPE or attracting as many devices as possible to connect to perform MitM attacks...

TP-Link WR840N Buffer Overflow Vulnerability

The TP-Link WR840N is a wireless router product from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-Link WR840N. An attacker can exploit this vulnerability to cause a denial of service...

TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)

TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Title: TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Author: Aniket Dinda Date: 2018-08-05 Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q...

TP-Link WR840N 0.9.1 3.16 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc Exploit Title: TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Author: Aniket Dinda Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Version: TP-Li...

TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)

Exploit Title: TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Author: Aniket Dinda Date: 2018-08-05 Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Version: TP-Link Wireless N Router WR840N Firmwar...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

Buffer overflow

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172

CVE-2018-15172 affects TP-Link WR840N devices, where a buffer overflow can be triggered by a long Authorization HTTP header. The vulnerability is documented as a buffer overflow leading to potential denial of service on the WR840N; PoC/exploit activity exists (e.g., via sending an abnormally long...

TP-Link C50 Wireless Router 3 Information Disclosure Cross Site Request Forgery

Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Information Disclosure Date: 2018-08-09 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3 00000001 Firmware Link: https://www.tp-link.com/download/Archer-C50V3.htmlFirmware...

TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Remote Reboot)

TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Remote Reboot Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Remote Reboot Date: 2018-08-09 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3 00000001 Firmware Link...