KCodes NetUSB kernel driver is vulnerable to buffer overflow

Overview KCodes NetUSB is vulnerable to a buffer overflow via the network that may result in a denial of service or code execution. Description KCodes NetUSB is a Linux kernel module that provides USB over IP. It is used to provide USB device sharing on a home user network.CWE-120: Buffer Copy...

Command Injection Vulnerability in Multiple Cisco TelePresence Products

A vulnerability in the web framework of multiple Cisco TelePresence products could allow an authenticated, remote attacker to inject arbitrary commands that are executed with the privileges of the root user. The vulnerability is due to insufficient input validation. An attacker could exploit this...

TP-LINK Information Disclosure Vulnerability in a Series of Routers

P&L Technology Ltd. is a network equipment developer and manufacturer with a history of nearly 20 years. Its products are mainly home and office desktop equipment for a wide range of applications. TP-LINK TL-WR842N is a powerful and secure home router. Allows attackers to exploit vulnerabilities ...

Allegro v4.34 权限提升漏洞

Allegro v4.34 权限提升漏洞 1.漏洞分析 在RomPager 4.34版之前（RomPager软件已有10多年的历史）存在一个严重的漏洞，这个漏洞被称为厄运 cookie（Misfortune Cookie），这是因为它可以让黑客通过操作cookie来控制HTTP请求的“幸运值”。 这个漏洞编号为CVE-2014-9222，如果攻击者向存在漏洞的RomPager服务器发送特定请求，会使得这类网关设备内存紊乱，攻击者获得管理权限。 这个漏洞正在影响全球1200万台路由器安全， D-Link、 TP-Link、华为、中兴等品牌均受到影响，攻击者可以利用漏洞远程控制设备及监控流量...

CVE-2015-3035

Directory traversal vulnerability in TP-LINK Archer C5 1.2 with firmware before 150317, C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N 5.0 and TL-WR741ND 5.0 with...

Directory traversal

Directory traversal vulnerability in TP-LINK Archer C5 1.2 with firmware before 150317, C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N 5.0 and TL-WR741ND 5.0 with...

CVE-2015-3035

Directory traversal vulnerability in TP-LINK Archer C5 1.2 with firmware before 150317, C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N 5.0 and TL-WR741ND 5.0 with...

SEC Consult SA-20150410-0 :: Unauthenticated Local File Disclosure in multiple TP-LINK products (CVE-2015-3035)

SEC Consult Vulnerability Lab Security Advisory 20150410-0 ======================================================================= title: Unauthenticated Local File Disclosure product: Multiple TP-LINK products see Vulnerable / tested versions vulnerable version: Multiple see Vulnerable / tested...

TP-LINK devices unauthorized files access

Directory traversal in web interface...

CVE-2015-3035

Directory traversal vulnerability in TP-LINK Archer C5 1.2 with firmware before 150317, C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N 5.0 and TL-WR741ND 5.0 with...

CVE-2015-3035

Directory traversal vulnerability in TP-LINK Archer C5 1.2 with firmware before 150317, C7 2.0 with firmware before 150304, and C8 1.0 with firmware before 150316, Archer C9 1.0, TL-WDR3500 1.0, TL-WDR3600 1.0, and TL-WDR4300 1.0 with firmware before 150302, TL-WR740N 5.0 and TL-WR741ND 5.0 with...

CVE-2015-3035

TP-LINK routers are affected by CVE-2015-3035: a directory traversal in PATH_INFO triggered at /login/ that allows remote attackers to read arbitrary files. Affected models and firmware windows include Archer C5 (1.2) <150317, C7 (2.0) <150304, C8 (1.0) <150316, Archer C9 (1.0), TL-WDR35...

PT-2015-3445 · Tp Link · Tp-Link Tl-Wr741N +10

Name of the Vulnerable Software and Affected Versions: TP-LINK Archer C5 versions 1.2 with firmware before 150317 TP-LINK Archer C7 version 2.0 with firmware before 150304 TP-LINK Archer C8 version 1.0 with firmware before 150316 TP-LINK Archer C9 version 1.0 TP-LINK TL-WDR3500 version 1.0 with...

Multiple TP-LINK Product Catalog Traversal Vulnerability

TP-Link is a well-known supplier of networking and communication equipment. A directory traversal vulnerability exists in multiple TP-LINK products. An attacker is allowed to exploit this vulnerability to obtain sensitive information and launch further attacks...

Mao10CMS V3.3.0 两处sql注入（官网demo测试）

简要描述： V3.3.0 两处sql注入。 详细说明： 发现mao10 用的是老版本的tp框架，于是乎注入就来了。。 1 /Application/User/Controller/IndexController.class.php public function edit$id=false if!isnumeric$id $id = mcuserid; ; ifisnumeric$id ifmcuserid==$id ifmcremovehtml$POST'title','all' $title =...

TP-LINK Local File Disclosure

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Unauthenticated Local File Disclosure product: Multiple TP-LINK products see Vulnerable / tested versions vulnerable version: Multiple see Vulnerable / tested versions...

Multiple TP-LINK Products LFI Vulnerability (Apr 2015) - Active Check

Multiple TP-LINK devices are prone to a local file include LFI vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2016-61: Denial of Service in the web interface to TP-Link wireless devices control system

The specialists of the Positive Research center have detected a Denial of Service vulnerability in the web interface to TP-Link wireless devices control system. An attacker can cause a full denial of service of the server used for the web interface to wireless devices control system via the speci...

By javascript hack TP-Link Router with the Poc and video-bug warning-the black bar safety net

Recently read this post:“getlocalandpublicipaddressesinjavascript with javascript to get the local and public IP address”I began to think, this used to hack into WIFI router is a good idea Ah, I have just got a TP-LINK WR741N, then measured up the chant. The collection of relevant information, I...

TP-link TL-WR840N router series there is a CSRF vulnerability, you can modify any of the configuration containing the POC-the exploit-warning-the black bar safety net

TP-Link routers in the domestic volume of users is very large, the recent foreign security researchers found that the TP-Link a series of routers there is a CSRF vulnerability, an attacker can modify the router in any configuration, including DNS, etc. Vulnerability TP-Link TL-WR840N router...