180 matches found
CVE-2022-25064
CVE-2022-25064 TP-LINK TL-WR840N RCE tramite la funzione oalwan6setIpAddr POC root@kitploit: POST /cgi?2&2&2 HTTP/1.1 Host: 192.168.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0 Gecko/20100101 Firefox/95.0 Accept: / Accept-Language: es-ES,es;q=0.8,en-US;q=0.5,en;q=0.3...
cve-2018-11714_POC
cve-2018-11714POC Um problema foi descoberto no TP-Link TL-WR840N. Esse problema é causado pelo manuseio incorreto de sessão na pasta /cgi/ ou em um arquivo /cgi. Se um atacante enviar um cabeçalho "Referer: http://192.168.0.1/mainFrame.htm", nenhuma autenticação será necessária para qualquer açã...
CVE-2021-41653
CVE-2021-41653 TP-Link TL-WR840N EU v5 Execução Remota de Código Referência: https://k4m1ll0.com/cve-2021-41653.html...
CVE-2022-25064
CVE-2022-25064 Questo script sfrutta una vulnerabilità di OS Command Injection nel router TPLink WR840N, utilizzando la funzione configure del protocollo IPv6...
CVE-2022-25063
CVE-2022-25063 Dieses Skript nutzt eine Sicherheitslücke XSS im TPLink WR840N Router aus, indem es ein Feld zum Einschleusen von javascript-Code verwendet...
CVE-2022-25062
CVE-2022-25062 यह स्क्रिप्ट TPLink WR840N राउटर में एक कमजोरी IoF का शोषण करता है, DNS मॉड्यूल में कोड इंजेक्ट करने के लिए एक फ़ील्ड का उपयोग करते हुए।...
CVE-2022-25061
CVE-2022-25061 Questo script sfrutta una vulnerabilità di esecuzione remota di comandi nel componente oalsetIp6DefaultRoute del router TPLink WR840N...
CVE-2022-25060
CVE-2022-25060 Questo script sfrutta una vulnerabilità di esecuzione remota di comandi nel componente oalstartPing del router TPLink WR840N...
CVE-2018-12633-TPLink-Auth-Bypass
CVE-2018-12633-TPLink-Auth-Bypass Un caso di studio tecnico e un'analisi di sfruttamento della vulnerabilità di bypass dell'autenticazione nel firmware TP-Link TL-WR840N CVE-2018-12633. Analisi della vulnerabilità: bypass dell'autenticazione di TP-Link TL-WR840N CVE-2018-12633 ⚠️ Disclaimer: Quest...
CVE-2026-3227
Technical details beyond the brief description are not provided in the supplied documents. Monitor for updates on affected devices and firmware.
CVE-2026-3227
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file...
CVE-2026-3227 Authenticated Command Injection on TP-Link TL-WR802N, TL-WR841N and TL-WR840N
A command injection vulnerability was identified in TP-Link TL-WR802N v4, TL-WR841N v14, and TL-WR840N v6 due to improper neutralization of special elements used in an OS command. In the router configuration import function allows an authenticated attacker to upload a crafted configuration file...
TP-LINK WR840N v6 up to 0.9.1 4.16 - Improper Authentication
A vulnerability in the TP-Link WR840N v6 router with firmware version 0.9.1 4.16 and earlier permits unauthorized individuals to bypass the authentication of some interfaces under the /cgi directory.When adding Referer- http-//tplinkwifi.net to the the request, it will be recognized as passing th...
CVE-2022-26641
TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the httpRemotePort parameter...
CVE-2022-26642
TP-LINK TL-WR840NESV6.20 was discovered to contain a buffer overflow via the XTPClonedMACAddress parameter...
CVE-2019-12195
TP-Link TL-WR840N v5 00000005 devices allow XSS via the network name. The attacker must log into the router by breaking the password and going to the admin login page by THC-HYDRA to get the network name. With an XSS payload, the network name changed automatically and the internet connection was...
Exploit for Race Condition in Linux Linux_Kernel
CVE-2018-12633-TPLink-Auth-Bypass A technical case study and e...
VulnCheck KEV: CVE-2018-11714
An issue was discovered on TP-Link TL-WR840N v5 00000005 0.9.1 3.16 v0001.0 Build 170608 Rel.58696n and TL-WR841N v13 00000013 0.9.1 4.16 v0001.0 Build 170622 Rel.64334n devices. This issue is caused by improper session handling on the /cgi/ folder or a /cgi file. If an attacker sends a header of...
