PT-2021-6151 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n 5553 Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link TL-WR940N routers. Authentication is required to exploit th...

PT-2021-6150 · Tp Link · Tp-Link Tl-Wr940N

Name of the Vulnerable Software and Affected Versions: TP-Link TL-WR940N version 3.20.1 Build 200316 Rel.34392n 5553 Description: The issue results from the lack of proper access control within the httpd service, which listens on TCP port 80 by default. This allows network-adjacent attackers to...

TP-Link Multiple Products Remote Code Execution (CVE-2020-35575)

A remote code execution vulnerability exists in Multiple TP-Link Products. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

PT-2021-5992

Name of the Vulnerable Software and Affected Versions TP-Link AX10v1 versions prior to v1 211117 Description The issue is related to a deficiency in handling HTTP requests, which can be exploited by a remote unauthenticated attacker to conduct an HTTP request smuggling attack. This can lead to a...

CVE-2021-29280

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow...

Buffer overflow

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow...

CVE-2021-29280

In TP-Link Wireless N Router WR840N an ARP poisoning attack can cause buffer overflow...

CVE-2021-29280

CVE-2021-29280 concerns a vulnerability in the TP-Link Wireless N Router WR840N where an ARP poisoning attack can lead to a buffer overflow. Multiple sources in connected documents confirm the affected device and the attack vector, with root cause described as ARP manipulation causing overflow. T...

TP-Link WR840N 安全漏洞

Tp-link TP-Link WR840N is a wireless router from China P&L Tp-link. A security vulnerability exists in the TP-Link WR840N, which originates from an ARP poisoning attack on the device that can result in a buffer overflow...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

Sql injection

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

CVE-2020-18164

CVE-2020-18164 affects tp-shop 2.x–3.x, with an SQL Injection in the /index.php/home/api/shop fBill parameter. Root cause: unsafely constructed SQL queries exposed via the fBill input. Impact per sources: high severity (NVD CVSS v3.1: 9.8, CRITICAL; v2.0: 7.5, HIGH) with network access and no aut...

CVE-2020-18164

SQL Injection vulnerability exists in tp-shop 2.x-3.x via the /index.php/home/api/shop fBill parameter...

TP-Link UE330 USB Information Disclosure Vulnerability

TP-Link UE330 USB is a port USB 3.0 hub. TP-Link UE330 USB has a security vulnerability that could be exploited by remote attackers to recover voice signals from LEDs on the device through binoculars and photoelectric sensors to conduct "firefly" attacks...

CVE-2021-38543

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

CVE-2021-38543

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

CVE-2021-38543

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

Code injection

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...

CVE-2021-38543

TP-Link UE330 USB splitter devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We...