TP-LINK - Local File Inclusion

TP-LINK is susceptible to local file inclusion in these products: Archer C5 1.2 with firmware before 150317, Archer C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N...

TP-Link - OS Command Injection

The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840NEUV5171211 is vulnerable to remote code execution via a specially crafted payload in an IP address input field. id: CVE-2021-41653 info: name: TP-Link - OS Command Injection author: gy741 severity: critical...

TP-Link Archer A20 v3 Router - Cross-site Scripting

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

TP-Link TL-WR840N - Command Injection

The TP-Link TL-WR840NESV6.20180709 router contains a command injection vulnerability in the oalsetIp6DefaultRoute component. This vulnerability allows authenticated attackers to execute arbitrary system commands, leading to complete device compromise. id: CVE-2022-25061 info: name: TP-Link...

Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change

The Transposh WordPress Translation plugin for WordPress is vulnerable to unauthorized setting changes by unauthenticated users in versions up to, and including, 1.0.8.1. This is due to insufficient permissions checking on the 'tptranslation' AJAX action and default settings which makes it possib...

CVE-2019-17147_Practice_Material

CVE-2019-17147PracticeMaterial This repo contains dumped flash partitions with firmware version vulnerable to CVE-2019-17147, and some useful binaries to downgrade and debug your WR841NV14 router. Doing hardware modifications such as overwriting flash chip partitions have its risks. Evaluate the...

TP-Link-WDR-Router-Command-injection_POC

This repository does not have a README...

minipwner

MiniPwner A script to configure a TP-Link MR3040 running OpenWRT into a simple, yet powerful penetration-testing "drop box". What is the "MiniPwner"? The MiniPwner is a penetration testing "drop box". It is designed as a small, simple but powerful device that can be inconspicuously plugged into a...

CVE-2026-3227-TP-Link-authenticated-RCE

CVE-2026-3227: TP-लिंक राउटर OS कमांड इंजेक्शन अधिक जानकारी के लिए देखें https://vulners.com/cve/CVE-2026-3227 एक स्थायी, प्रमाणित OS कमांड इंजेक्शन भेद्यता TP-लिंक राउटर फर्मवेयर में जो डिवाइस को ब्रिक करने या संभावित LAN अधिग्रहण की ओर ले जाती है। अस्वीकरण : इस रिपॉजिटरी में एक पैच की गई भेद्यत...

cve-2018-11714_POC

cve-2018-11714POC An issue was discovered on TP-Link TL-WR840N. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of "Referer: http://192.168.0.1/mainFrame.htm" then no authentication is required for any action. artigo pt-br:...

CVE-2022-25063

CVE-2022-25063 This script exploits a vulnerability XSS in the TPLink WR840N router, using a field for injecting javascript code...

CVE-2023-33538

Python Exploit for TP-Link TL-WR940N/TL-WR841N Command Injection Vulnerability Usage Instructions 1. Basic Vulnerability Check : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p admin 2. Execute Custom Command : root@kitploit: python tplinkexploit.py -t 192.168.1.1 -u admin -p...

rtl8812au

RTL8812AU/21AU और RTL8814AU वायरलेस ड्राइवर केवल Linux और Android के उपयोग के लिए ये ड्राइवर बहिष्कृत हैं। इसके बजाय mac80211 ड्राइवर का उपयोग करें: https://github.com/lwfinger/rtw88 महत्वपूर्ण! root@kitploit: Use "ip" and "iw" instead of "ifconfig" and "iwconfig" It's described further down, REA...

CVE-2022-24355

CVE-2022-24355 Tplink wr841 v10 rce exploit without authorisation ⚠️ Disclaimer The code in this repository is provided as-is for educational and defensive security research purposes only. Use it only on systems you own or have explicit permission to test. The author is not responsible for any...

CVE-2022-30075

CVE-2022-30075 Authenticated Remote Code Execution in Tp-Link Routers Affected Devices If your Tp-Link router has backup and restore functionality and firmware is older than june 2022, it is probably vulnerable Tested With Tp-Link Archer AX50, other tplink routers may use different format of...

CVE-2023-33538-msf

CVE-2023-33538 – TP-Link TL-WR940N/841N Command Injection Metasploit मॉड्यूल यह Metasploit सहायक मॉड्यूल TP-Link TL-WR940N V2/V4 और TL-WR841N V8/V10 राउटर्स में एक प्रमाणित कमांड इंजेक्शन भेद्यता को लक्षित करता है। समस्या WlanNetworkRpm.htm में उपयोग किए जाने वाले कमजोर ssid1 पैरामीटर में है, जो...

TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30074 This tool performs authenticated remote code execution using the CVE-2022-30075 vulnerability found in TP-Link Archer AX50 and some other TP-Link router models. TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Th...

CVE-2025-40634

CVE-2025-40634 TP-Link Archer AX50 राउटर अपने फर्मवेयर संस्करण 1.0.14 Build 20240108 rel.426554555 में स्टैक-आधारित बफर ओवरफ्लो के प्रति संवेदनशील है, जिससे LAN और WAN दोनों ओर रिमोट कोड एक्ज़ीक्यूशन Remote Code Execution हो सकता है। इस भेद्यता का मूल कारण CVE-2020-10881 के समान है, जिसे Flashbac...

CVE-2021-4045

🔍 CVE-2021-4045: Command Injection Vulnerability in TP-Link Tapo C200 CVE-2021-4045 📌 Summary CVE-2021-4045 is a command injection vulnerability discovered in the TP-Link Tapo C200 camera, allowing an attacker to take full control of the device withroot privileges. This vulnerability affects all...

CVE-2018-16119

CVE-2018-16119: Authenticated Remote Code Execution in TP-Link WR1043ND Overview CVE-2018-16119 is a critical authenticated remote code execution vulnerability affecting TP-Link TL-WR1043ND routers. This vulnerability allows authenticated attackers to execute arbitrary commands on the target devi...