56 matches found
CVE-2022-25064
CVE-2022-25064 TP-LINK TL-WR840N 通过函数 oalwan6setIpAddr 实现 RCE POC root@kitploit: POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3 Accept-Encoding:...
CVE-2018-12633-TPLink-Auth-Bypass
CVE-2018-12633-TPLink-Auth-Bypass 针对 TP-Link TL-WR840N 固件中身份验证绕过漏洞（CVE-2018-12633）的技术案例研究与利用分析。 漏洞分析：TP-Link TL-WR840N 身份验证绕过（CVE-2018-12633） ⚠️ 免责声明： 本仓库仅用于教育和研究目的 。此处提供的分析旨在展示旧版固件中的漏洞，以强调生命周期管理和补丁应用的重要性。未经授权利用您不拥有的设备属于违法行为。 📄 执行摘要 本案例研究记录了对 CVE-2018-12633 的成功利用过程。该漏洞是 TP-Link TL-WR840N 无线 N 路由器...
CVE-2021-41653
CVE-2021-41653 TP-Link TL-WR840N EU v5 远程代码执行 参考：https://k4m1ll0.com/cve-2021-41653.html...
cve-2018-11714_POC
cve-2018-11714POC 在 TP-Link TL-WR840N 上发现了一个问题。该问题是由 /cgi/ 文件夹或 /cgi 文件的不当会话处理引起的。如果攻击者发送带有 "Referer: http://192.168.0.1/mainFrame.htm" 的标头，则任何操作都无需身份验证。 文章 pt-br: https://nous.sidneypepo.com/router2025.html...
CVE-2026-3227 Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file...
CVE-2022-26642
TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the XTPClonedMACAddress parameter...
CVE-2019-12195
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...
EUVD-2019-3843
Malware in sbrugna...
EUVD-2021-32822
Malicious code in bioql PyPI...
CVE-2022-29402
TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication...
CVE-2022-26640
TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the minAddress parameter...
CVE-2022-25060
TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalstartPing...
CVE-2022-25061
TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalsetIp6DefaultRoute...
CVE-2022-25062
TP-LINK TL-WR840NESV6.20180709 was discovered to contain an integer overflow via the function dmcheckString. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted HTTP request...
CVE-2021-46122
Tp-Link TL-WR840N EU v6.20 Firmware 0.9.1 4.17 v0001.0 Build 201124 Rel.64328n is vulnerable to Buffer Overflow via the Password reset feature...
CVE-2020-36178
oaliptaddBridgeIsolationRules on TP-Link TL-WR840N 6EU0.9.14.16 devices allows OS command injection because a raw string entered from the web interface an IP address field is used directly for a call to the system library function for iptables. NOTE: oaliptaddBridgeIsolationRules is not the only...
编号撤回
The TP-LINK TL-WR840N is a wireless router from China P&L TP-LINK. This CVE number has been withdrawn...
CVE-2025-29649
CVE-2025-29649 has concrete details in connected sources: Red Hat's entry describes an SQL Injection vulnerability in the TP-Link TL-WR840N router login dashboard (version 1.0), exploitable by unauthenticated attackers via the username and password fields; note that this finding is disputed and m...
