CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

CVE-2023-28760

The TP-Link AX1800 WiFi 6 Router (Archer AX21) is vulnerable to a stack-based buffer overflow in the minidlna-1.1.2/upnpsoap.c component. An unauthenticated attacker on the LAN can exploit an unvalidated db_dir field in the minidlnad service to modify the files.db file. This chain allows for arbi...

CVE-2022-26580

PAX A930 device with PayDroid7.1.1VirgoV04.3.26T120210419 can allow the execution of specific command injections on selected binaries in the ADB daemon shell service. The attacker must have physical USB access to the device in order to exploit this vulnerability...