CVE-2024-5243-pwn2own-toronto-2023

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth RCE CVE-2024-5242 / CVE-2024-5243 / CVE-2024-5244 针对 TP-Link Omada ER605 DDNS 客户端守护进程 cmxddnsd 的概念验证 PoC 漏洞利用链，当设备配置使用 Comexe DDNS 服务时触发。 ⚠️ 法律/道德 ：本仓库仅用于授权安全研究 和受控实验室复现 。请勿用于您不拥有或未获明确测试许可的系统。 概述 本 PoC 展示了一种组合利用方式，结合了： 1. 针对 DDNS...

Exploit for Classic Buffer Overflow in Tp-Link Omada_Er605_Firmware

CVE-2024-5243-pwn2own-toronto-2023 TP-Link ER605 Pre-Auth...

EUVD-2024-46483

Malicious code in bioql PyPI...

EUVD-2024-46466

Malicious code in bioql PyPI...

EUVD-2024-46467

Malicious code in bioql PyPI...

EUVD-2024-46482

Malicious code in bioql PyPI...

The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router’s microprogramming software allows a malicious actor to execute arbitrary code under the root user context.

The vulnerability of the /usr/bin/pppd component of the TP-Link Omada ER605 VPN router software exists due to the lack of measures taken to neutralize specific elements used in the operating system command. Exploiting this vulnerability allows a malicious actor to execute arbitrary code under the...

The vulnerability of the executable file cmxddns in the microprogramming software of TP-Link Omada er605 allows a hacker to execute arbitrary code in the root context.

The vulnerability of the executable file cmxddnsd of the TP-Link Omada er605 microcontroller software is related to the use of weak security mechanisms. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context...

The vulnerability of TP-Link Omada er605 microcontroller-based software is caused by buffer overflow in the stack, allowing an attacker to execute arbitrary code.

The vulnerability of TP-Link Omada er605 microprogramming software is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of TP-Link Omada er605’s microprogramming software arises from buffer overflow in the stack, allowing an attacker to execute arbitrary code in the root context.

The vulnerability of TP-Link Omada er605 microprogramming software is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code in the root context...

The vulnerability of TP-Link Omada er605’s microprogramming software arises from incorrect processing of DDNS error codes, allowing a intruder to execute any arbitrary code in the root context.

The vulnerability of TP-Link Omada er605 microprogramming software is caused by incorrect processing of DDNS error codes. Exploiting this vulnerability allows a remote attacker to execute any code within the root context...

CVE-2024-5228

TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this...

CVE-2024-5244

TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability. This vulnerability allows network-adjacent attackers to access or spoof DDNS messages on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices...

CVE-2024-5244

TP-Link Omada ER605 Reliance on Security Through Obscurity Vulnerability. This vulnerability allows network-adjacent attackers to access or spoof DDNS messages on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices...

CVE-2024-5243

TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are...

CVE-2024-5243

TP-Link Omada ER605 Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However, devices are...

CVE-2024-5228

TP-Link Omada ER605 Comexe DDNS Response Handling Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this...

CVE-2024-5242

TP-Link Omada ER605 Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability. However,...

CVE-2024-5227

TP-Link Omada ER605 PPTP VPN username Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Omada ER605 routers. Authentication is not required to exploit this vulnerability...

CVE-2024-5244

CVE-2024-5244 affects TP-Link Omada ER605 routers with the cmxddnsd component. The flaw arises from reliance on obscurity to protect network data, allowing network-adjacent attackers to access or spoof DDNS messages when the device is configured to use the Comexe DDNS service. The description ind...