CVE-2024-57376

CVE-2024-57376 D-Link DSR-250 および DSR-250N 向けのプリオーセンスリモートコード実行エクスプロイト セキュリティアドバイザリ: https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10415 使用方法 root@kitploit: $ python3 exploit.py usage: 例 root@kitploit: $ python3 exploit.py 192.168.1.1 443 id + fingerprint device:...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-Link ルーター OS コマンドインジェクション 詳細情報については https://vulners.com/cve/CVE-2026-3227 を参照 TP-Link ルーターファームウェアにおける持続的かつ認証済みの OS コマンドインジェクションの脆弱性。デバイスの文鎮化や潜在的な LAN 乗っ取りにつながる可能性があります。 免責事項 : このリポジトリには、パッチ適用済みの脆弱性に対する概念実証（PoC）コードが含まれています。教育目的およびセキュリティ研究者向けに提供されています。 エグゼクティブサマリー 複数の TP-Link...

blogpost_cve-2018-19987-analysis

CVE-2018-19987 D-Link OS command injection analysis こんにちは！ この短いブログ記事では、CVE-2018-19987 の詳細をより深く理解するために行った簡単な分析を解説します。当初、この CVE には公開情報やエクスプロイトが存在しないと思って調査を始めました。最初の分析を終えた直後に、GitHub 上に二つの公開 PoC を見つけました。こちら と こちら です。 すでにほとんどの作業を終えており、完全な分析を見つけられなかったため、ブログ記事を書くことにしました。 お楽しみいただければ幸いです。 更新:...

CVE-2023-33538

TP-Link TL-WR940N/TL-WR841N コマンドインジェクション脆弱性のPythonエクスプロイト 使用手順 1. 基本的な脆弱性チェック : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. カスタムコマンドの実行 : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin -c "yourcommandhere" 3. リバースシェル 先にリスナーを nc -lvnp 4444...

CVE-2026-11834

CVE-2026-11834 PoC TP-Link DHCP Option 66 の未認証RCE（CVE-2026-11834） 概要 DHCP Option 66（「TFTPサーバー名」）の処理におけるTP-Linkルーターファームウェアのコマンドインジェクションの脆弱性（CWE-78）により、同一ネットワークセグメント上の未認証の攻撃者がrootとして任意のコマンドを実行できます。デバイスがWANインターフェースでDHCPクライアントとして動作するとき、リースで返されたOption...

CVE-2026-35867: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of the LB-LINK router AC1900AZ2 V1.0.2 via shell metacharacters, if the device is deployed in a scenario where an actor is able to make a "POST /goform/setLimitClientcfg" call but does not...

CVE-2026-35868

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC2100AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2026-35869

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

EUVD-2026-67254

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

EUVD-2026-67255

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC2100AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

PT-2026-82659

A Command Injection vulnerability exists in the bs SetLimitCli info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2026-35868: Improper Input Validation

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC2100AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2026-35869

The LB-link Router AC450M V4.0.0 is affected by a Command Injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library. The root cause is the insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. ...

CVE-2026-35868

A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of the LB-link Router AC2100_AZ3 V1.0.4 . The root cause is the insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution conte...

PT-2026-82658

A Command Injection vulnerability exists in the bs SetLimitCli info function within the libshare.so library of LB-link Router AC2100 AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context...

CVE-2026-35869: Improper Input Validation

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2026-35869

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2026-35868

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC2100AZ3 V1.0.4. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

CVE-2025-26237

D-Link DI-7001 MINI5G 19.10.31A1 contains a code execution vulnerability in the flag parameter of mspinfo, which can be exploited to run arbitrary commands...

EUVD-2026-51669

An OS command injection vulnerability exists in the VPN module of TP-Link AXE75 V1 routers. This vulnerability allows an adjacent, authenticated attacker to execute arbitrary commands on the device by importing a specially crafted VPN client configuration file. The issue arises from improper...