TP-Link Archer C60 1.0 Code Execution

Exploit Title: UnAuthenticated Remote Code Execution at TP-Link Archer C60 Router Date: 16.07.2018 Exploit Author: Ismail Tasdelen Vendor Homepage: https://www.tp-link.com/ Hardware Link : https://www.tp-link.com/la/products/details/cat-9Archer-C60.html Hardware Version : Archer C60 v1.0 Firmware...

TP-Link Wireless Access Point Detection

Detection of TP-Link Wireless Access Point. The script sends a connection request to the server and attempts to detect the presence and get the model of TP-Link Wireless Access Point. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...

TP-Link Wireless Range Extender Detection

Detection of TP-Link Wireless Range Extender. The script sends a connection request to the server and attempts to detect the presence and get the model of TP-Link Wireless Range Extender. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources...

TP-Link-defaults - Python Script For Trying Default Passwords For Some TP-Link Hotspots

Python script for trying default passwords for some TP-Link Hotspots Inspired by Usage usage: scan.py -h -p Python script for trying default passwords for some TP-Link Hotspots optional arguments: -h, --help show this help message and exit -p, --print-all print all found ssid's FOR EDUCATIONAL US...

tp-cars.si XSS vulnerability

Open Bug Bounty ID: OBB-640671 Description| Value ---|--- Affected Website:| tp-cars.si Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2018-13134

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATHINFO to the /webpages/data URI...

Design/Logic Flaw

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATHINFO to the /webpages/data URI...

CVE-2018-13134

CVE-2018-13134 affects TP-Link Archer C1200 firmware, specifically EU version 1.13 Build 2018/01/24 rel.52299. The issue is a Cross‑Site Scripting (XSS) vulnerability via PATH_INFO to the /webpages/data URI in the router’s web UI. The root cause is failure to filter special characters/inputs, ena...

CVE-2018-13134

TP-Link Archer C1200 1.13 Build 2018/01/24 rel.52299 EU devices have XSS via the PATHINFO to the /webpages/data URI...

TP-LINK TL-WR841N Standalone Hijacking Vulnerability

TP-LINK TL-WR841N is a wireless router product from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n version. An attacker can exploit the vulnerability to hijack a click operation and cause the user to perform a...

TP-Link TL-WR840N and TL-WR841N Authentication Bypass Vulnerability

TP-Link TL-WR840N and TL-WR841N are both wireless router products from China P&L TP-LINK. A security vulnerability exists in the TP-Link TL-WR840N and TL-WR841N, which originates from the program failing to properly handle sessions. An attacker can exploit the vulnerability to perform arbitrary...

Cross site request forgery (csrf)

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12575

On TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 171019 Rel.55346n devices, all actions in the web interface are affected by bypass of authentication via an HTTP request...

CVE-2018-12577

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...

Security feature bypass

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

CVE-2018-12576

TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow clickjacking...

CVE-2018-12574

CSRF exists for all actions in the web interface on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices...

Command injection

The Ping and Traceroute features on TP-Link TL-WR841N v13 00000001 0.9.1 4.16 v0001.0 Build 180119 Rel.65243n devices allow authenticated blind Command Injection...