5040 matches found
CVE-2025-29089
The CVE-2025-29089 entry concerns TP-Link AX10 Ax1500 (v1.3.10 Build 20230130). Affected component is the router's information handling that enables a remote attacker to obtain sensitive information. Public sources describe an information-disclosure vulnerability caused by a flaw in explicit tran...
A week in security (September 1 – September 7)
Last week on Malwarebytes Labs: Nexar dashcam video database hacked Roblox introduces age checks to use communication features Give your PC a fresh start: New free tools to boost your PC’s speed, security, and peace of mind TP-Link warns of botnet infecting routers and targeting Microsoft 365...
TP-LINK AX10和TP-LINK AX1500 安全漏洞
TP-LINK AX10 and TP-LINK AX1500 are both products of China P&L TP-LINK.TP-LINK AX10 is a router.TP-LINK AX1500 is a modem. A security vulnerability exists in the TP-LINK AX10 version prior to 1.2.1 and the TP-LINK AX1500 version prior to 1.3.11, which stems from the CWMP binary could be used to...
CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Wednesday added two security flaws impacting TP-Link wireless routers to its Known Exploited Vulnerabilities KEV catalog, noting that there is evidence of them being exploited in the wild. The vulnerabilities in question are listed...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2023-50224link is external TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability CVE-2025-9377link is external TP-Link Archer C7EU and TL-WR841N/NDM...
CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added a high-severity security flaw impacting TP-Link TL-WA855RE Wi-Fi Ranger Extender products to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2020-24363...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2020-24363link is external TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability CVE-2025-55177link is external Meta Platforms WhatsApp...
VulnCheck KEV: CVE-2020-24363
TP-Link TL-WA855RE V5 20200415-rel37464 devices allow an unauthenticated attacker on the same network to submit a TDDPRESET POST request for a factory reset and reboot. The attacker can then obtain incorrect access control by setting a new administrative password...
CVE-2025-8627
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...
CVE-2025-9377
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
VulnCheck KEV: CVE-2023-50224
TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability...
VulnCheck KEV: CVE-2025-9377
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
CVE-2025-8627
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...
CVE-2025-8627 Unauthenticated Protocol Commands on TP-Link KP303
The TP-Link KP303 Smartplug can be issued unauthenticated protocol commands that may cause unintended power-off condition and potential information leak. This issue affects TP-Link KP303 US Smartplug: before 1.1.0...
PT-2025-34709
Name of the Vulnerable Software and Affected Versions: TP-Link KP303 Smartplug versions prior to 1.1.0 Description: The TP-Link KP303 Smartplug is susceptible to unauthenticated protocol commands that can lead to an unintended power-off condition and potential information leak. Recommendations:...
TP-Link KP303 安全漏洞
TP-Link KP303 is a smart plug-in board from China P&L TP-Link. A security vulnerability exists in the TP-Link KP303 version prior to 1.1.0, which stems from the ability to issue unauthenticated protocol commands that could result in unexpected power loss and information disclosure...
Malicious code in @zalastax/nolb-_tp (npm)
The package @zalastax/nolb-tp was found to contain malicious code...
Malicious code in @zalastax/nolb-react-tp (npm)
The package @zalastax/nolb-react-tp was found to contain malicious code...
MAL-2025-13811 Malicious code in @zalastax/nolb-react-tp (npm)
The package @zalastax/nolb-react-tp was found to contain malicious code...
CVE-2025-53713
A vulnerability has been found in TP-Link TL-WR841N V11. The vulnerability exists in the /userRpm/WlanNetworkRpmAPC.htm file due to missing input parameter validation, which may lead to the buffer overflow to cause a crash of the web service and result in a denial-of-service DoS condition. The...