CVE-2024-53375

CVE-2024-53375 حقن أوامر نظام التشغيل بعد المصادقة في أجهزة توجيه سلسلة TP-Link Archer الأجهزة المتأثرة أجهزة TP-Link التي تستخدم وظيفة HomeShield معرضة لهذا الاستغلال. يشمل ذلك عدة أجهزة توجيه من سلسلة TP-Link Archer. تم الاختبار باستخدام Archer AXE75EUV11.2.2 Build 20240827 تاريخ النشر: 4 نوفمب...

CVE-2021-37152

CVE-2021-37152 Exploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack exploit This exploit is designed for accessing and scanning network clients and you will easily access and prepare for a mitm attack, the exploit will attack in layers three and tw...

CVE-2021-4045

عنوان الاستغلال: TP-LINK Tapo c200 1.1.15 - RCE المورّد: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ الإصدار: 1.1.15 وما دونه CVE: CVE-2021-4045 قابل للتحميل بوت نت C2 و استغلال جماعي شرح الثغرة: https://www.hacefresko.com/posts/tp-link-tapo-c200-unauthenticated-rce...

CVE-2023-1389

Description CVE-2023–1389 is an Unauthenticated Command Injection vulnerability in the TP-Link Archer AX21 WiFi router. A calllback in the country parameter uses the popen function, which is run as root, allowing the attacker to inject arbitrary values through GET or POST requests to the admin...

Poc-CVE-2024-57040

Poc-CVE-2024-57040 CVE-2024-57040 is a security vulnerability found in certain TP-Link TL-WR845N router models. Specifically, it involves a "hardcoded" password for the router's root account. This means a default, unchanging password is built into the router's software. Affected Devices: The...

CVE-2021-4045

CVE-2021-4045 CVE-2021-4045 est une vulnérabilité d'injection de commandes qui permet l'exécution de code à distance sur la caméra IP TP-Link Tapo c200. Elle affecte toutes les versions de firmware antérieures à 1.1.16 Build 211209 Rel. 37726N en raison de contrôles insuffisants sur l'entrée...

CVE-2021-44827

CVE-2021-44827 CVE-2021-44827 के लिए एक PoC - Tp-link Archer C20i में प्रमाणित दूरस्थ कोड निष्पादन विस्तृत विवरण: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html उदाहरण root@kitploit: $ python exploit.py error0 error0 Run postexploitcmd Tryin...

CVE-2020-35575-TP-LINK-TL-WR841ND-password-disclosure

CVE-2020-35575-password-disclosure-issue-in-the-web-interface A password-disclosure issue in the web interface on certain TP-Link devices allows a remote malicious user to get full administrative access to the web panel. This affects WA901ND devices prior to 3.16.9201211 beta, and Archer C5, Arch...

CVE-2022-25062

CVE-2022-25062 This script exploits a vulnerability IoF in the TPLink WR840N router, using a field for injecting code in the module DNS...

tplink-smartplug

TP-Link WiFi SmartPlug क्लाइंट और Wireshark डिसेक्टर पूरी कहानी के लिए देखें Reverse Engineering the TP-Link HS110 tplinksmartplug.py मालिकाना TP-Link Smart Home प्रोटोकॉल के लिए एक पायथन क्लाइंट जो TP-Link HS100, HS110 और KP115 WiFi Smart Plugs को नियंत्रित करता है। SmartHome प्रोटोकॉल TCP पोर्ट...

CVE-2020-14965

CVE-2020-14965 root@kitploit: ██╗ ██╗████████╗███╗ ███╗██╗ ██╗███╗ ██╗ ██╗███████╗ ██████╗████████╗██╗ ██████╗ ███╗ ██╗ ██║ ██║╚══██╔══╝████╗ ████║██║ ██║████╗ ██║ ██║██╔════╝██╔════╝╚══██╔══╝██║██╔═══██╗████╗ ██║ ███████║ ██║ ██╔████╔██║██║ ██║██╔██╗ ██║ ██║█████╗ ██║ ██║ ██║██║ ██║██╔██╗ ██║...

CVE-2026-80889

In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix timer drain order, wakeup handling and txgen ordering This patch is a follow-up to commit cf070fe33bfb "can: isotp: serialize TX state transitions under so-rxlock" which addresses following sashiko-bot findings: -...

cve-2026-8697

CVE-2026-8697: Login Rate Limit Bypass on TP-Link Archer C64 CVE-2026-8697 is a logic flaw in the TP-Link Archer C64's OS called TPOS in the debug message. It lets any unprivileged user connected to the router to bypass the web UI rate limit by using a residual SSH service. A simple Python script...

CVE-2026-22226

CVE-2026-22226 Proof of Concept for CVE-2026-22226 Authenticated LAN-side OS Command Injection in the VPN Client of TP-Link Archer Wi-Fi routers Vulnerability brief The VPN Client controller stores the user-controlled entry description des in the UCI configuration with a weak validation regex. Wh...

EUVD-2026-70818

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

EUVD-2026-70819

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...

cve-2026-1668-poc

استغلال إثبات المفهوم لـ CVE-2026-1668 هذا استغلال إثبات مفهوم لثغرة CVE-2026-1668. وهو مخصص للأغراض التعليمية فقط. يُرجى عدم محاولة استغلال أنظمة لا تملكها أو ليس لديك إذن صريح لاستغلالها. تم تطوير إثبات المفهوم هذا ضد صورة برنامج ثابت ببصمة SHA256 التالية:...

CVE-2026-18330

A hard-coded cryptographic key vulnerability exists in the web module of TP-Link Archer AX55 v4. A LAN attacker who captures an HTTP login session may use the known shared RSA private key to decrypt the administrator password; the weakened AES session key further reduces the effort required to...

CVE-2026-18167

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...

CVE-2026-18167 Stack-based buffer overflow in TP-Link Archer AX55 v4

A stack-based buffer overflow vulnerability exists in the EasyMesh module of TP-Link Archer AX55 v4. When Mesh mode is enabled, a LAN attacker may submit crafted input that causes the easymesh daemon to crash and may potentially achieve remote code execution on the device. Successful exploitation...