26 matches found
CVE-2021-27209
In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...
CVE-2021-27210
TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...
EUVD-2021-13975
Malware in sbrugna...
EUVD-2021-13974
Malware in sbrugna...
EUVD-2023-58674
Malicious code in bioql PyPI...
CVE-2023-6437
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection. This issue affec...
CVE-2023-6437
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection. This issue affec...
CVE-2023-6437 Authenticated RCE
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection. This issue affec...
CVE-2023-6437: Improper Neutralization of Special Elements used in an OS Command
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in TP-Link TP-Link EX20v AX1800, Tp-Link Archer C5v AC1200, Tp-Link TD-W9970, Tp-Link TD-W9970v3, TP-Link VX220-G2u, TP-Link VN020-G2u allows authenticated OS Command Injection. This issue affec...
TP-Link Archer C5v Information Disclosure Vulnerability
The TP-Link Archer C5v is an AC1200 wireless dual-band Gigabit VoIP router. An information disclosure vulnerability exists in TP-Link Archer C5v 1.7181221. A remote attacker can exploit this vulnerability by sending a USERCFG0,0,0,0,0,0,0,00,0,0,0,00,0 request to the /cgi?1&5 URI to retrieve...
CVE-2021-27209
In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...
CVE-2021-27209
In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...
CVE-2021-27210
TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...
Format string
In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...
CVE-2021-27209
In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...
Design/Logic Flaw
TP-Link Archer C5v 1.7181221 devices allows remote attackers to retrieve cleartext credentials via USERCFG0,0,0,0,0,00,0,0,0,0,00,0 to the /cgi?1&5 URI...
CVE-2021-27209
In the management interface on TP-Link Archer C5v 1.7181221 devices, credentials are sent in a base64 format over cleartext HTTP...
CVE-2021-27209
CVE-2021-27209 affects TP-Link Archer C5v 1.7_181221 devices where the management interface transmits credentials encoded in base64 over cleartext HTTP. The root cause is insecure transmission of authentication data in the management UI, enabling potential eavesdropping or credential exposure if ...
CVE-2021-27210
The CVE-2021-27210 entry affects the TP-Link Archer C5v device (version 1.7_181221). Affected component/issue: information disclosure via the /cgi?1&5 URI, exploited by sending a crafted USER_CFG request to retrieve plaintext credentials. The vulnerability is described as a remote information dis...