TP-L-NK-SIZMA-EXPLO-T

TP-LiNK-SIZMA-EXPLOiT TP-Link Router Authenticated RCE Exploit CVE-2022-30075 Esta ferramenta utiliza a vulnerabilidade CVE-2022-30075 encontrada no TP-Link Archer AX50 e em alguns outros modelos de roteadores TP-Link para realizar execução remota de comandos autenticada Authenticated Remote Code...

TP-Link-ArcherC5-RCE

TP-Link Archer C5 RCE Autenticado Através de Upload de Arquivo de Configuração Malicioso CVE-2018-19537 Descrição Existe uma vulnerabilidade de execução remota de código RCE autenticada em todas as versões de firmware publicadas para o roteador TP-Link Archer C5. Ao fazer upload de um arquivo de...

CVE-2026-22226

CVE-2026-22226 Prova de conceito para CVE-2026-22226 Injeção de comandos do sistema operacional autenticada no lado da LAN no cliente VPN dos roteadores Wi-Fi TP-Link Archer Resumo da vulnerabilidade O controlador do cliente VPN armazena a descrição da entrada controlada pelo usuário des na...

CVE-2023-1389

TP-Link Archer AX21 - Injeção de Comando Não Autenticada Loader POC CVE-2023-1389 Título do Exploit: TP-Link Archer AX21 - Injeção de Comando Não Autenticada Data da Descoberta : 07/25/2023 Autor do Exploit: Voyag3r root@kitploit: How to Use :- Scanning - Use Zmap : zmap -p 80 -o list.txt NetCat...

CVE-2024-53375

CVE-2024-53375 Injeção de Comandos do SO Autenticada em Roteadores da Série Archer da TP-Link Dispositivos Afetados Dispositivos TP-Link que utilizam a funcionalidade HomeShield são vulneráveis a este exploit. Isso abrange vários roteadores da série Archer da TP-Link. Testado Com Archer...

cve-2026-8697

CVE-2026-8697: تجاوز حد معدل محاولات تسجيل الدخول في TP-Link Archer C64 CVE-2026-8697 هو خلل منطقي في نظام تشغيل TP-Link Archer C64 يُسمى TPOS في رسالة التصحيح. يسمح لأي مستخدم غير مميز متصل بالموجّه بتجاوز حد معدل محاولات واجهة الويب باستخدام خدمة SSH متبقية. يمكن استخدام سكربت بايثون بسيط لتجرب...

CVE-2023-1389

Descrição CVE-2023–1389 é uma vulnerabilidade de Injeção de Comando não Autenticada no roteador WiFi TP-Link Archer AX21. Um callback no parâmetro country usa a função popen , que é executada como root, permitindo que o atacante injete valores arbitrários através de requisições GET ou POST na...

CVE-2021-44827

CVE-2021-44827 CVE-2021-44827 के लिए एक PoC - Tp-link Archer C20i में प्रमाणित दूरस्थ कोड निष्पादन विस्तृत विवरण: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html उदाहरण root@kitploit: $ python exploit.py error0 error0 Run postexploitcmd Tryin...

CVE-2020-10882

Links de referência https://www.zerodayinitiative.com/blog/2020/4/6/exploiting-the-tp-link-archer-c7-at-pwn2own-tokyo https://github.com/rdomanski/ExploitsandAdvisories/blob/master/advisories/Pwn2Own/Tokyo2019/laobomb.md...

CVE-2025-40634

CVE-2025-40634 Le routeur TP-Link Archer AX50 est vulnérable à un débordement de tampon basé sur la pile dans sa version de firmware 1.0.14 Build 20240108 rel.426554555, conduisant à une exécution de code à distance à la fois côté LAN et côté WAN. Cette vulnérabilité a la même cause racine que...

TP-Link Archer A20 v3 Router - Cross-site Scripting

The TP-Link Archer A20 v3 router is vulnerable to Cross-site Scripting XSS due to improper handling of directory listing paths in the web interface. When a specially crafted URL is visited, the router's web page renders the directory listing and executes arbitrary JavaScript embedded in the URL...

CVE-2021-27246_Pwn2Own2020

Pwn2Own 2020 Tokyo Edition - TPlink exploit ये वे फ़ाइलें हैं जिनका उपयोग Pwn2Own 2020 Tokyo के दौरान TPlink Archer राउटर को exploit करने के लिए किया गया था। इस भेद्यता vulnerability का नंबर CVE-2021-27246 है। आप विवरण के लिए synacktiv वेबसाइट पर ब्लॉग पोस्ट देख सकते हैं।...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-78541

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1 . An authenticated adjacent attacker with administrative access can store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

EUVD-2026-65062

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

CVE-2026-75616

CVE-2026-75616 TP-Link Archer C20 v6 वेब प्रबंधन इंटरफ़ेस में प्रमाणित OS कमांड इंजेक्शन। BPA WAN कॉन्फ़िगरेशन मान पर्याप्त न्यूट्रलाइज़ेशन के बिना system को पास किए जाते हैं, जिससे आसन्न नेटवर्क पर एक प्रमाणित व्यवस्थापक रूट के रूप में कमांड निष्पादित कर सकता है। Daniil Gordeev totekuh द्वारा खो...

CVE-2026-16348

TP-Link Archer BE800 V1 is affected by an authenticated command injection in its VPN connection handling. An attacker with administrative access can inject shell metacharacters via the VPN connection to execute arbitrary system commands with root privileges . Successful exploitation may enable pe...

EUVD-2026-65007

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-16348 Command Injection Vulnerability in VPN connection of Archer BE800

An authenticated command injection vulnerability in TP-Link Archer BE800 V1 allows an attacker with administrative access to execute arbitrary system commands with root privileges by injecting shell metacharacters via a VPN connection. Successful exploitation may enable persistent backdoors,...

CVE-2026-9254 Command Injection Vulnerability in Parent Control of Multiple TP-Link Archer Devices

An unauthenticated OS command injection vulnerability exists in the parental control functionality of Archer BE800 V1, BE3600 V1, and AX75 V1 due to improper filtering and neutralization of special characters in certain parameters. A LAN-based attacker can inject arbitrary commands and execute th...