4869 matches found
REMOTE CODE EXECUTION (CVE-2017-13772) WALKTHROUGH ON A TP-LINK ROUTER
INTRODUCTION In this post, I will be discussing my recent findings while conducting vulnerability research on a home router: TP-Link’s WR940N home WiFi router. This post will outline the steps taken to identify vulnerable code paths, and how we can exploit those paths to gain remote code executio...
CVE-2017-13772
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...
Stack overflow
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...
CVE-2017-13772
Summary (from provided sources): CVE-2017-13772 is a stack-based buffer overflow vulnerability in TP-Link WR940N routers (hardware version 4) that allows remote authenticated code execution via GET parameters, specifically ping_addr in PingIframeRpm.htm or dnsserver2 in WanStaticIpV6CfgRpm.htm. C...
CVE-2017-13772
Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbitrary code via the 1 pingaddr parameter to PingIframeRpm.htm or 2 dnsserver2 parameter to WanStaticIpV6CfgRpm.htm...
TP-Link WR940N Remote Code Execution Vulnerability
The TP-Link WR940N is a SOHO wireless router. A remote code execution vulnerability exists in the TP-Link WR940N. The vulnerability can be exploited by a remote authenticated user to execute arbitrary code via the pingaddr parameter of PingIframeRpm.htm or the dnsserver2 parameter of...
TP-LINK TL-MR3220 Xss Vulnerability
O que este produto faz Compartilhe a liberdade do 3G! O Roteador Wireless N 3G/3.75G TL-MR3220 permite aos usuários compartilhar uma conexão de internet banda larga móvel 3G/3.75G com familiares e amigos enquanto estão acampando, em um hotel, e em praticamente qualquer lugar com cobertura de sina...
TP-Link WR940N Remote Code Execution
Advisory Information Title: TP-Link Remote Code Execution Blog URL: https://www.fidusinfosec.com/tp-link-remote-code-execution-cve-2017-13772/ Vendor: TP-Link Date Published: 19/10/2017 CVE: CVE-2017-13772 Vulnerability Summary Numerous remote code execution paths were discovered in TP-Link's...
TP-Link WR940N - Authenticated Remote Code Exploit Exploit
Exploit for hardware platform in category web applications import urllib2 import base64 import hashlib from optparse import import sys import urllibbanner = "\n" "WR940N Authenticated Remote Code Exploit\n" "This exploit will open a bind shell on the remote target\n" "The port is 31337, you can...
CVE-2017-15291
Cross-site scripting XSS vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to inject arbitrary web script or HTML via the Description field...
CVE-2017-15291
CVE-2017-15291 affects TP-LINK TL-MR3220 wireless routers. The vulnerability is a cross-site scripting (XSS) flaw in the Wireless MAC Filtering page, where an attacker can inject arbitrary web script or HTML via the Description field. This is triggered by unsafely reflecting user-supplied content...
CVE-2017-15291
Cross-site scripting XSS vulnerability in the Wireless MAC Filtering page in TP-LINK TL-MR3220 wireless routers allows remote attackers to inject arbitrary web script or HTML via the Description field...
‘IOTroop’ Botnet Could Dwarf Mirai in Size and Devastation, Says Researcher
A botnet, which is adding new bots every day, has already infected one million businesses during the past month and could easily eclipse the size and devastation caused by Mirai. The malware and botnet, dubbed IOTroop, was spotted in September by researchers at Check Point who warn that 60 percen...
TP-Link WR940N - (Authenticated) Remote Code
import urllib2 import base64 import hashlib from optparse import import sys import urllibbanner = "\n" "WR940N Authenticated Remote Code Exploit\n" "This exploit will open a bind shell on the remote target\n" "The port is 31337, you can change that in the code if you wish\n" "This exploit require...
TP-Link WR940N - (Authenticated) Remote Code
TP-Link WR940N - Authenticated Remote Code import urllib2 import base64 import hashlib from optparse import import sys import urllibbanner = "\n" "WR940N Authenticated Remote Code Exploit\n" "This exploit will open a bind shell on the remote target\n" "The port is 31337, you can change that in th...
TP-Link TL-MR3220 - Cross-Site Scripting
TP-Link TL-MR3220 - Cross-Site Scripting Exploit Title: Vulnerability Xss - TP-LINK TL-MR3220 Date: 12/10/2017 Exploit Author: Thiago "THX" Sena Vendor Homepage: http://www.tp-link.com.br Version: TL-MR3220 Tested on: Windows 10 CVE : CVE-2017-15291 Vulnerabilty: Cross-site scripting XSS in TP-LI...
TP-Link TL-MR3220 - Cross-Site Scripting
Exploit Title: Vulnerability Xss - TP-LINK TL-MR3220 Date: 12/10/2017 Exploit Author: Thiago "THX" Sena Vendor Homepage: http://www.tp-link.com.br Version: TL-MR3220 Tested on: Windows 10 CVE : CVE-2017-15291 Vulnerabilty: Cross-site scripting XSS in TP-LINK TL-MR3220 cve:...
The vulnerability in the web interface of the TP-Link wireless router allows a hacker to cause a complete failure in the service of the web interface server.
The vulnerability of the web interface of the TP-Link wireless router is caused by resource management errors. Exploiting this vulnerability allows a malicious actor to completely disable the web interface by using a specially crafted request. To restore the web interface, the device must be...
TP-Link TD-W8901G Default Credentials / Authentcation Bypass
Exploit Title: MULTIPLE VULNERABILITIES ON TP-LINK Date: 10-08-2017 Exploit Author: v.Dhanunjaya Vendor Homepage: http://www.tp-link.in/ AFFECTED FRIMWARE : TD-W8901G Tested on: Windows 10,ubuntu 14.04 LTS Email : [email protected] Support : CRYPTONICRAPTURES TARGET :...
PiSavar - Detects PineAP Module and Starts Deauthentication Attack (for fake access points)
The goal of this project is to find out the fake access points opened by the WiFi pineapple device using the PineAP module and to prevent clients from being affected by initiating a deauthentication attack to the attacking device. How PineAP Module Works Collects SSID information Creates SSID poo...