TP-Link Tapo c200 1.1.15 - Remote Code Execution (RCE)

Exploit Title: TP-Link Tapo c200 1.1.15 - Remote Code Execution RCE Date: 02/11/2022 Exploit Author: hacefresko Vendor Homepage: https://www.tp-link.com/en/home-networking/cloud-camera/tapo-c200/ Version: 1.1.15 and below Tested on: 1.1.11, 1.1.14 and 1.1.15 CVE : CVE-2021-4045 Write up of the...

CVE-2022-37860

The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability...

CVE-2022-37860

The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability...

Command injection

The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability...

CVE-2022-37860

The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vulnerability...

CVE-2022-37860

The CVE-2022-37860 issue affects the TP-Link M7350 V3 web configuration interface (firmware version 190531). All connected documents describe a pre-authentication command injection vulnerability in the web UI, stemming from insufficient input/data handling at the management level. Impact stated a...

Exploit for CVE-2022-30075

C...

PT-2022-4968 · Tp Link · Tp-Link M7350

Name of the Vulnerable Software and Affected Versions: TP-Link M7350 version 190531 Description: The web configuration interface of the TP-Link M7350 is affected by a pre-authentication command injection issue. This is related to the lack of data cleaning measures at the management level...

TP-LINK M7350 操作系统命令注入漏洞

The TP-LINK M7350 is a portable wireless router device from China P&L TP-LINK. An operating system command injection vulnerability exists in TP-Link M7350 V3 firmware version 190531, which stems from a web configuration interface that can be affected by a pre-authentication command injection...

CVE-2022-2462 Transposh WordPress Translation <= 1.0.9.6 - Sensitive Information Disclosure

The Transposh WordPress Translation plugin for WordPress is vulnerable to sensitive information disclosure to unauthenticated users in versions up to, and including, 1.0.9.6. This is due to insufficient permissions checking on the 'tphistory' AJAX action and insufficient restriction on the data...

PT-2022-5834 · Tp Link · Tp-Link Tl-Wr740N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR740N affected versions not specified Description: A problematic vulnerability has been found in the ARP Handler component, leading to resource consumption when manipulated. The attack must be carried out within the local network...

面向嵌入式设备的典型pwn漏洞检测与利用系统

This is a PoC exploit for various router vulnerabilities. The repository contains multiple modules for different router types, including D-Link, Huawei, Netcore, and TP-Link. Each module is designed to exploit a specific vulnerability in the corresponding router model. The modules are written in...

CVE-2021-42232

TP-Link Archer A7 Archer A7USV5210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router...

Command injection

TP-Link Archer A7 Archer A7USV5210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router...

CVE-2021-42232

TP-Link Archer A7 Archer A7USV5210519 is affected by a command injection vulnerability in /usr/bin/tddp. The vulnerability is caused by the program taking part of the received data packet as part of the command. This will cause an attacker to execute arbitrary commands on the router...

CVE-2021-42232

TP-Link Archer A7 (US) V5_210519 is affected by a command injection in /usr/bin/tddp where the process uses part of the received packet as part of the command, allowing an attacker to execute arbitrary commands on the router. This vulnerability is designated CVE-2021-42232. Impact is described as...

TP-LINK Archer A7 操作系统命令注入漏洞

TP-LINK Archer A7 is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-LINK Archer A7USV5210519 version, which originates when the program uses a portion of a received packet as part of a command, and can be exploited by an attacker to execute arbitrary commands ...

CVE-2022-25810

The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tpreset” under the Utilities tab /wp-admin/admin.php?page=tputils, which can be used/executed as the lowest-privileged user. Basically all Utilities functionalities are vulnerable th...

VulnCheck KEV: CVE-2022-25060

TP-LINK TL-WR840NESV6.20180709 was discovered to contain a command injection vulnerability via the component oalstartPing...

The vulnerability of the UART console of the TP-Link TL-WR840N EU microprogramming software allows a hacker to execute arbitrary commands on behalf of the root user.

The vulnerability of the UART console of the TP-Link TL-WR840N EU router’s microprogramming software lies in the absence of authentication procedures. Exploiting this vulnerability allows a hacker to execute arbitrary commands on behalf of the root user...