CVE-2018-17016

The CVE-2018-17016 issue affects the TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). The vulnerability allows authenticated attackers to crash router services (including inetd, HTTP, DNS, and UPnP) by sending long JSON data targeting the reboot_timer field. The connected sources pro...

CVE-2018-17005

CVE-2018-17005 affects TP-Link TL-WR886N devices (6.0 2.3.4 and 7.0 1.1.0). The issue is a crash in router services (inetd, HTTP, DNS, UPnP) triggered by long JSON data for firewall dmz enable. Multiple feeds (NVD, RH, CNVD, CNVD) corroborate this denial-of-service behavior. The connected documen...

CVE-2018-17010

CVE-2018-17010 affects TP-Link TL-WR886N devices (versions 6.0 2.3.4 and 7.0 1.1.0). The issue is triggered by sending long JSON data related to wireless wlan_host_2g bandwidth, which can cause authenticated attackers to crash router services such as inetd, HTTP, DNS, and UPnP. The available docu...

CVE-2018-17014

The CVE-2018-17014 issue affects TP-Link TL-WR886N devices in 6.0 2.3.4 and 7.0 1.1.0 revisions. Authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending excessively long JSON data in the ip_mac_bind field. The connected sources corroborate the same description across...

CVE-2018-17011

An issue was discovered on TP-Link TL-WR886N 6.0 2.3.4 and TL-WR886N 7.0 1.1.0 devices. Authenticated attackers can crash router services e.g., inetd, HTTP, DNS, and UPnP via long JSON data for hostsinfo para sun...

CVE-2018-17006

This entry concerns TP-Link TL-WR886N devices (firmware 6.0 2.3.4 and 7.0 1.1.0) where authenticated attackers can crash router services (inetd, HTTP, DNS, UPnP) by sending long JSON data to the firewall lan_manage mac2. The vulnerability is triggered by crafted input that overwhelms service hand...

tp-tara.ru XSS vulnerability

Open Bug Bounty ID: OBB-666738 Description| Value ---|--- Affected Website:| tp-tara.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

TP-Link File Disclosure Vulnerability

Multiple TP-Link devices are prone to a file disclosure vulnerability where an unauthenticated attacker may obtain the configuration backup file which may contain sensitive data e.g. admin password which could lead to complete compromise of the device. Copyright C 2018 Greenbone Networks GmbH Som...

Rogue Access Point Toolkit : hostapd-mana

hostapd-mana is a featureful rogue wifi access point tool. It can be used for a myriad of purposes from tracking and deanonymising devices aka Snoopy, gathering corporate credentials from devices attempting EAP aka WPE or attracting as many devices as possible to connect to perform MitM attacks...

TP-Link WR840N Buffer Overflow Vulnerability

The TP-Link WR840N is a wireless router product from China P&L TP-LINK. A buffer overflow vulnerability exists in the TP-Link WR840N. An attacker can exploit this vulnerability to cause a denial of service...

TP-Link WR840N 0.9.1 3.16 - Denial of Service Exploit

Exploit for hardware platform in category dos / poc Exploit Title: TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Author: Aniket Dinda Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Version: TP-Li...

TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)

TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Title: TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Author: Aniket Dinda Date: 2018-08-05 Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q...

TP-Link WR840N 0.9.1 3.16 - Denial of Service (PoC)

Exploit Title: TP-Link WR840N 0.9.1 3.16 - Denial of Service PoC Exploit Author: Aniket Dinda Date: 2018-08-05 Vendor Homepage: https://www.tp-link.com/ Hardware Link: https://www.amazon.in/TP-LINK-TL-WR840N-300Mbps-Wireless-External/dp/B01A0G1J7Q Version: TP-Link Wireless N Router WR840N Firmwar...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

Buffer overflow

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172

TP-Link WR840N devices have a buffer overflow via a long Authorization HTTP header...

CVE-2018-15172

CVE-2018-15172 affects TP-Link WR840N devices, where a buffer overflow can be triggered by a long Authorization HTTP header. The vulnerability is documented as a buffer overflow leading to potential denial of service on the WR840N; PoC/exploit activity exists (e.g., via sending an abnormally long...

TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery (Information Disclosure)

TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Information Disclosure Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Information Disclosure Date: 2018-08-09 Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3...

TP-Link Archer C50 V3 Wireless Router 3 - CSRF (Remote Reboot) Vulnerability

Exploit for hardware platform in category web applications Exploit Title: TP-Link C50 Wireless Router 3 - Cross-Site Request Forgery Remote Reboot Exploit Author: Wadeek Vendor Homepage: https://www.tp-link.com/ Hardware Version: Archer C50 v3 00000001 Firmware Link:...