4976 matches found
TP-Link Router Vulnerability Triggers Mirai Malware Infection
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The TP-Link router vulnerability allows attackers to execute commands and infect devices with the Mirai malware. To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn...
WordPress TP Education Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)
Software TP Education Type Plugin Vulnerable versions = 4.4 Fixed in 4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32103 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 8a332241839a Credits deokhunKim Required privilege...
Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The security vulnerabilities are as follows - CVE-2023-1389 CVSS score: 8.8 - TP-Link Archer AX-21 Command Injection...
Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added three flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The security vulnerabilities are as follows - CVE-2023-1389 CVSS score: 8.8 - TP-Link Archer AX-21 Command Injection...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-1389 TP-Link Archer AX-21 Command Injection Vulnerability CVE-2021-45046 Apache Log4j2 Deserialization of Untrusted Data Vulnerability CVE-2023-21839 Oracle...
TP-Link Archer AX-21 Command Injection Vulnerability
TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution...
Binary Vulnerability in TP-LINK TL-WR841N
The TP-LINK TL-WR841N is a classic 11n wireless router from TP-Link. A binary vulnerability exists in the TP-LINK TL-WR841N, which can be exploited by attackers to cause a denial-of-service attack...
(Pwn2Own) TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability
This vulnerability allows remote attackers to gain access to LAN-side services on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hotplugd daemon. The issue results from firewall rule handling...
(Pwn2Own) TP-Link Archer AX21 merge_country_config Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer AX21 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mergecountryconfig function. The issue results from the lack o...
The vulnerability of the MiniDLNA service in the TPDLNA/files.db file of TP-Link Archer AX20 (AX1800) routers allows a hacker to execute arbitrary code.
The vulnerability of the MiniDLNA service in the TPDLNA/files.db file on TP-Link Archer AX20 AX1800 routers is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...
CVE-2022-37255
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
CVE-2022-37255
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
Default credentials
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
CVE-2022-37255
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
CVE-2022-37255
TP-Link Tapo C310 1.3.0 devices allow access to the RTSP video feed via credentials of User --- and Password TPL075526460603...
CVE-2022-37255
CVE-2022-37255 affects TP-Link Tapo C310 v1.3.0 (and earlier) with unauthorised RTSP video stream access when default credentials are used. The vulnerability allows access to the RTSP feed using the credentials User --- / Password TPL075526460603, as documented in multiple sources (Exploit-DB, Pa...
VulnCheck KEV: CVE-2023-1389
TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution...
The vulnerability of microprogrammed network devices from Cisco, NetGear, Mercury, Huawei, TP-Link, H3C, Tenda, Ruijie arises from the lack of proper filtering for fake ICMP messages. This allows attackers to execute spoofing attacks.
The vulnerability of microprogrammed network devices from Cisco, NetGear, Mercury, Huawei, TP-Link, H3C, Tenda, and Ruijie relates to the lack of proper filtering for fake ICMP messages. Exploiting this vulnerability allows a remote attacker to execute a spoofing attack...
CVE-2023-28368
TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQUNV11.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential...
CVE-2023-28368
TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQUNV11.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared to spoof the affected device with the vulnerable host key.If the administrator may be tricked to login to the fake device, the credential...