CVE-2023-39745

TP-Link TL-WR940N V2, TP-Link TL-WR941ND V5 and TP-Link TL-WR841N V8 were discovered to contain a buffer overflow via the component /userRpm/AccessCtrlAccessRulesRpm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-39747

TP-Link WR841N V8, TP-Link TL-WR940N V2, and TL-WR941ND V5 were discovered to contain a buffer overflow via the radiusSecret parameter at /userRpm/WlanSecurityRpm...

TP-LINK TL-WR1041N 安全漏洞

TP-LINK TL-WR1041N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WR1041N V2 version, which originates from a security flaw in the component /userRpm/NetworkCfgRpm. An attacker can exploit the vulnerability to cause a Denial of Service DoS by...

CVE-2023-39748

An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service DoS via a crafted GET request...

TP-LINK TL-WR941ND 安全漏洞

The TP-LINK TL-WR941ND is a wireless router from China P&L TP-LINK. A security vulnerability exists in TP-Link Routers, which stems from a buffer overflow vulnerability in the radiusSecret parameter. Affected products and versions: TP-Link WR841N V8 version, TL-WR940N V2 version, TL-WR941ND V5...

PT-2023-4521 · Tp Link · Tp-Link Tl-Wr1041N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR1041N version V2 Description: The issue is related to the component /userRpm/NetworkCfgRpm and allows attackers to cause a Denial of Service DoS via a crafted GET request to the "GET" endpoint. This is due to incorrect clearance ...

CVE-2023-39748

An issue in the component /userRpm/NetworkCfgRpm of TP-Link TL-WR1041N V2 allows attackers to cause a Denial of Service DoS via a crafted GET request...

CVE-2023-32103

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Theme Palace TP Education plugin = 4.4 versions...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Theme Palace TP Education plugin = 4.4 versions...

CVE-2023-32103

CVE-2023-32103 is a stored Cross-Site Scripting (XSS) vulnerability affecting the WordPress plugin Theme Palace TP Education up to version 4.4 . The issue arises from an XSS flaw in the plugin’s handling of user-generated content, with patches available in version 4.5 . Public references in Patch...

CVE-2023-32103 WordPress TP Education Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Theme Palace TP Education plugin = 4.4 versions...

CVE-2023-32103 WordPress TP Education Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Theme Palace TP Education plugin = 4.4 versions...

WordPress plugin TP Education 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-23613 · Theme Palace · Wp Education

Name of the Vulnerable Software and Affected Versions: Theme Palace TP Education plugin versions prior to 4.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that affects users with contributor or higher permissions. This allows for malicious scripts to be...

TP-Link Archer AX21 Command Injection

!/usr/bin/python3 Exploit Title: TP-Link Archer AX21 - Unauthenticated Command Injection Date: 07/25/2023 Exploit Author: Voyag3r https://github.com/Voyag3r-Security Vendor Homepage: https://www.tp-link.com/us/ Version: TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219...

TP-Link Archer AX21 - Unauthenticated Command Injection Exploit

!/usr/bin/python3 Exploit Title: TP-Link Archer AX21 - Unauthenticated Command Injection Date: 07/25/2023 Exploit Author: Voyag3r https://github.com/Voyag3r-Security Vendor Homepage: https://www.tp-link.com/us/ Version: TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219...

TP-Link Archer AX21 - Unauthenticated Command Injection

!/usr/bin/python3 Exploit Title: TP-Link Archer AX21 - Unauthenticated Command Injection Date: 07/25/2023 Exploit Author: Voyag3r https://github.com/Voyag3r-Security Vendor Homepage: https://www.tp-link.com/us/ Version: TP-Link Archer AX21 AX1800 firmware versions before 1.1.4 Build 20230219...

PT-2023-4467 · Tp Link · Tp-Link Tl-Wr941Nd

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR941ND version V6 Description: The issue is related to a buffer overflow via the pSize parameter at the "/userRpm/PingIframeRpm" API endpoint. This can potentially allow a remote attacker to execute arbitrary code or cause a denia...

PT-2023-4516 · Tp Link · Tp-Link Tl-Wr941Nd +2

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version V2 TP-Link TL-WR941ND version V5 TP-Link TL-WR841N version V8 Description: The issue is related to a buffer overflow in the /userRpm/AccessCtrlAccessRulesRpm component of TP-Link routers. This allows attackers to cau...

TP-LINK Archer AX21 Buffer Overflow Vulnerability

The TP-LINK Archer AX21 is a wireless router from China P&L TP-LINK. The TP-LINK Archer AX21 suffers from a buffer overflow vulnerability that originates from a program failing to properly validate the length and size of input data, which can be exploited by remote attackers to execute arbitrary...