CVE-2019-12195

TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...

TP-LINK TL-WR840N Cross Site Scripting

Exploit Title: TL-WR840N v5 00000005 Date: 5/10/2019 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware Firmware Version:0.9.1 3.16 v0001.0 Build 171211 Rel.5880...

TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications Exploit Title: TL-WR840N v5 00000005 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware Firmware...

TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting

TP-LINK TL-WR840N v5 00000005 - Cross-Site Scripting Exploit Title: TL-WR840N v5 00000005 Date: 5/10/2019 Exploit Author: purnendu ghosh Vendor Homepage: https://www.tp-link.com/ Software Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Category: Hardware...

CVE-2016-10719

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...

Cross site scripting

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...

CVE-2016-10719

TP-Link Archer CR-700 (firmware 1.0.6) is affected by a cross-site scripting (XSS) vulnerability that can be triggered via a DHCP request to inject script into the admin session. The exploit could lead to theft of cookies containing base64-encoded username and password information. Affected compo...

CVE-2016-10719

TP-Link Archer CR-700 1.0.6 devices have an XSS vulnerability that can be introduced into the admin account through a DHCP request, allowing the attacker to steal the cookie information, which contains the base64 encoded username and password...

TP-Link IP Cameras Default Credentials (HTTP)

The remote installation of TP-Link Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either...

TP-Link IP Cameras Detection (HTTP)

HTTP based detection TP-Link IP Cameras. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.114097";...

TP-Link TL-WR Buffer Overflow Remote Code Execution (CVE-2019-6989)

An arbitrary code execution vulnerability exists in TP-LINK TL-WR940N and TL-WR941ND. A remote attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

TP-Link SR20 Arbitrary Code Execution

An arbitrary code execution vulnerability exists in TP-Link SR20 smart hub. An unauthenticated attacker can exploit this vulnerability by sending a maliciously crafted packet to the target server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary cod...

Security feature bypass

The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service HTTP service termination by modifying the packet size to be higher than the UI limit of 1472...

CVE-2018-18489

The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service HTTP service termination by modifying the packet size to be higher than the UI limit of 1472...

CVE-2018-18489

The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service HTTP service termination by modifying the packet size to be higher than the UI limit of 1472...

CVE-2018-18489

The ping feature in the Diagnostic functionality on TP-LINK WR840N v2 Firmware 3.16.9 Build 150701 Rel.51516n devices allows remote attackers to cause a denial of service HTTP service termination by modifying the packet size to be higher than the UI limit of 1472...

CVE-2018-18489

TP-LINK WR840N v2 devices running Firmware 3.16.9 Build 150701 Rel.51516n expose a vulnerability in the Diagnostic ping feature: a remote attacker can cause denial of service (HTTP service termination) by sending a crafted packet larger than the UI limit of 1472. The CVE-2018-18489 entry document...

TP-LINK TL-WR940N / TL-WR941ND - Buffer Overflow Exploit

Author Grzegorz Wypych - h0rac TP-LINK TL-WR940N/TL-WR941ND buffer overflow remote shell exploit import requests import md5 import base64 import string import struct import socket password = md5.new'admin'.hexdigest cookie = base64.b64encode'admin:'+password print '+ Authorization cookie: ', cook...

TP-LINK TL-WR940N / TL-WR941ND Buffer Overflow

Author Grzegorz Wypych - h0rac TP-LINK TL-WR940N/TL-WR941ND buffer overflow remote shell exploit import requests import md5 import base64 import string import struct import socket password = md5.new'admin'.hexdigest cookie = base64.b64encode'admin:'+password print '+ Authorization cookie: ', cook...

TP-LINK TL-WR940N TL-WR941ND - Buffer Overflow

TP-LINK TL-WR940N TL-WR941ND - Buffer Overflow Author Grzegorz Wypych - h0rac TP-LINK TL-WR940N/TL-WR941ND buffer overflow remote shell exploit import requests import md5 import base64 import string import struct import socket password = md5.new'admin'.hexdigest cookie =...