6095 matches found
Exploit for Out-of-bounds Write in Tp-Link Omada_Sg2005P-Pd_Firmware
Proof-of-concept exploit for CVE-2026-1668 This is a proof-of...
Malicious Package
Overview @larocas-bbresearch/tp-probe-e29834ce is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
TP-Link Archer AX53 dnsmasq Module Command Execution
The vulnerability of the dnsmasq module in the microprogramming-based routing software for TP-Link Archer AX53 relates to the failure to take measures to neutralize special elements used in the operating system’s command syntax. Exploiting this vulnerability allows a remote attacker to execute...
OpenVPN Module Unauthorized Access
The vulnerability of the OpenVPN module of TP-Link Archer AX53 networking hardware is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information using a specially crafted file...
TP-Link Wi-Fi Router Privilege Escalation
The vulnerability of the HTTP server software in Wi-Fi routers from TP-Link, such as the Archer NX200, NX210, NX500, and NX600, is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges and impact the confidentialit...
OpenVPN Module Unauthorized Access
The vulnerability of the OpenVPN module of TP-Link Archer AX53 networking hardware is related to errors in system settings or configuration. Exploiting this vulnerability allows a malicious actor to gain unauthorized access to protected information using a specially crafted file...
OpenVPN Module Arbitrary Command Execution
The vulnerability of the OpenVPN module of TP-Link Archer AX53 router software relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands using a specially...
TP-Link Archer AX53 tmpserver Module Code Execution
The vulnerability of the tmpserver module in TP-Link Archer AX53 microprogramming software is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted file...
TP-Link Wi-Fi Router Configuration Compromise
The vulnerability of the configuration of Wi-Fi router microprogramming software from TP-Link, such as the Archer NX200, NX210, NX500, and NX600 models, lies in the use of rigidly encrypted login credentials. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality...
command-line interface (CLI) of Security Bypass
The vulnerability of the command-line interface CLI of TP-Link Wi-Fi router microprogramming systems such as Archer NX200, NX210, NX500, and NX600 is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remo...
TP-Link Archer VX1800v CRLF Injection Privilege Escalation
The vulnerability of TP-Link Archer VX1800v V1 microprogramming software is related to the lack of measures taken to eliminate CRLF sequences. Exploiting this vulnerability allows a remote attacker to alter account roles and gain administrator privileges...
PT-2026-98642
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ice driver where the ice tx dim work event performs a double dereference within the TP printk function. This occurs because printing happens significantly after th...
TP-CRIV: A Framework for Third-Party Challenge-Response Identity Verification of AI Models
Artificial intelligence AI models are increasingly deployed through remote services, making model misappropriation a growing concern. Existing approaches, including watermarking, fingerprinting, and model similarity analysis, primarily rely on predefined evidence or direct behavioral comparison a...
MAL-2026-16529 Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7279432ffb7dc233307df869ac5faaded0fef16333ec8a5948b15bae7bd716a7 The package was found to contain malicious code or consuming dependency that contains malicious code...
Malicious code in @larocas-bbresearch/tp-probe-e29834ce (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7279432ffb7dc233307df869ac5faaded0fef16333ec8a5948b15bae7bd716a7 The package was found to contain malicious code or consuming dependency that contains malicious code...
Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16528 Malicious code in @larocas-bbresearch/tp-probe-dc7a3670 (npm)
--- -= Per source details. Do not edit below this line.=-...
CWMP/TR-069 Protocol Code Execution Root Privileges
The vulnerability of the CWMP/TR-069 protocol implementation of TP-Link Archer VX1800v V1 software lies in the lack of measures to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with root...
PT-2026-96316
Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description OpenAI-compatible completion endpoints fail to validate the tp size parameter within kv transfer params. In prefill/decode disaggregated deployments, an attacker can provide arbitrary values for tp siz...
CVE-2025-56565
DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores sensitive authentication credentials in cleartext within non-volatile memory. The exposed material includes SSH private keys, dynamic DNS passwords, email notification credentials and administrative passwords. An...