CVE-2021-3275

Unauthenticated stored cross-site scripting XSS exists in multiple TP-Link products including WIFI Routers Wireless AC routers, Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper...

CVE-2021-3275

CVE-2021-3275 describes an unauthenticated stored cross-site scripting (XSS) affecting multiple TP-Link devices (TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, Archer C3150v2). Root cause is improper sanitization in hostname handling via the vulnerable function setDefaultHostname(), with exp...

TP-Link Cross Site Scripting

============================================================== Unauthenticated Stored Cross-site Scripting in Multiple TP-Link Devices ============================================================== Overview ======== Title:- Unauthenticated Stored Cross-site Scripting in TP-Link Devices. CVE-ID :-...

Weak password vulnerability in TP-LINK TL-ER6110G, TL-ER6120G, TL-ER6220G routers

TL-ER6110G, TL-ER6120G, TL-ER6220G are all TP-LINK routers. A weak password vulnerability exists in the TP-LINK TL-ER6110G, TL-ER6120G, TL-ER6220G routers, which can be exploited by attackers to obtain sensitive information...

TP-Link Devices - (setDefaultHostname) Stored Cross-site Scripting Vulnerability

Multiple TP-Link devices suffer from an unauthenticated persistent cross site scripting vulnerability. Affected models include TD-W9977, TL-WA801ND, TL-WA801N, TL-WR802N, and Archer-C3150. ============================================================== Unauthenticated Stored Cross-site Scripting i...

Buffer Overflow Vulnerability in TP-Link Routers

TL-WDR8500 is a TP-LINK router product. The TP-Link router suffers from a buffer overflow vulnerability that can be exploited by an attacker to gain control of the server...

Weak Password Vulnerability in TP-LINKE TL-ER3220G Router

The TL-ER3220G is a dual-core multi-WAN port Gigabit enterprise VPN router. The TP-LINKE TL-ER3220G router suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23515)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23514)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22935)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22941)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22937)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-22938)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-23516)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

TP-COUPON suffers from SQL injection vulnerability (CNVD-2021-21531)

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in TP-COUPON

TP-COUPON is a free and open source coupon system developed using the Thinkphp framework. TP-COUPON suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...

Weak Password Vulnerability in TP-LINK Archer C5

Archer C5 is a wireless router product. A weak password vulnerability exists in TP-LINK Archer C5. An attacker can exploit the vulnerability to log into the system backend and obtain sensitive information...

TP-Link Archer A7 Protection Mechanism Failure Firewall Bypass Vulnerability

This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SS...

TP-Link AC1750 sync-server Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoint. A...

TP-Link Archer C5v Information Disclosure Vulnerability

The TP-Link Archer C5v is an AC1200 wireless dual-band Gigabit VoIP router. An information disclosure vulnerability exists in TP-Link Archer C5v 1.7181221. A remote attacker can exploit this vulnerability by sending a USERCFG0,0,0,0,0,0,0,00,0,0,0,00,0 request to the /cgi?1&5 URI to retrieve...