CVE-2023-33538-msf

CVE-2023-33538 – TP-Link TL-WR940N/841N: внедрение команд модуль Metasploit Этот вспомогательный модуль Metasploit нацелен на аутентифицированную уязвимость внедрения команд в маршрутизаторах TP-Link TL-WR940N V2/V4 и TL-WR841N V8/V10. Проблема заключается в уязвимом параметре ssid1, используемом...

CVE-2024-54887-PoC

CVE-2024-54887 TypeScript PoC 이 저장소는 CVE-2024-54887 TP-Link TL-WR940N v3/v4 인증된 RCE에 대한 공용 Python PoC를 TypeScriptts-node로 재작성한 것입니다. 사전 요구 사항 Node.js 20+ 설치 root@kitploit: npm install 사용법 root@kitploit: npx ts-node .\cve-2024-54887.ts --ip 선택적 자격 증명: root@kitploit: npx ts-node .\cve-2024-54887.ts...

CVE-2026-12935

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

CVE-2026-12935

CVE-2026-12935 affects TL-WR940N v6 routers where the RTSP connection-tracking kernel module is vulnerable to a stack-based buffer overflow when a LAN client connects to a malicious RTSP server. This unauthenticated flaw can lead to denial-of-service or remote code execution, potentially compromi...

CVE-2026-12935 Unauthenticated Remote Code Execution in TP-Link TL-WR940N RTSP Conntrack Feature

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

EUVD-2026-50449

The TL-WR940N v6 router contains a vulnerability in its RTSP connection tracking module that can lead to a stack-based buffer overflow. The issue occurs when a LAN client initiates a connection to a malicious RTSP server controlled by an attacker. A specially crafted RTSP message may trigger...

CVE-2026-11409

An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11409 OS Command Injection in IPv6 PPPoE Configuration in TP-Link TL-WR940N

An authenticated OS command injection vulnerability exists in the IPv6 PPPoE configuration handler in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410 OS Command Injection in BigPond Cable (BPA) Configuration in TP-Link TL-WR940N

An authenticated OS command injection vulnerability exists in the BigPond Cable BPA WAN configuration module in TL-WR940N v6 due to improper sanitization of user input. An attacker with administrative access may exploit this issue to execute arbitrary system commands with elevated privileges...

CVE-2026-11410

The CVE-2026-11410 entry concerns TL-WR940N v6 (BigPond Cable BPA WAN config) with an authenticated OS command injection caused by improper input sanitization in the configuration module. An administrator can trigger arbitrary command execution with elevated privileges on the device via the BPA W...

PT-2026-50084

Name of the Vulnerable Software and Affected Versions TL-WR940N version v6 Description An authenticated OS command injection exists in the BigPond Cable BPA WAN configuration module due to improper sanitization of user input. An attacker with administrative access can exploit this flaw to execute...

Exploit for Classic Buffer Overflow in Tp-Link Tl-Wr940N_Firmware

CVE-2024-54887 TypeScript PoC This repository contains a Type...

CVE-2025-14739

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

CVE-2025-14739

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

CVE-2025-14739 Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

CVE-2025-14739 Uninitialized Pointer Vulnerability in TP-Link WR940N and WR941ND

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

CVE-2025-14739

The CVE-2025-14739 entry describes an Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND routers. Affected devices are WR940N (≤ v5 3.20.1 Build 200316) and WR941ND (≤ v6 3.16.9 Build 151203). The issue allows local, unauthenticated attackers to cause a DoS and potentiall...

PT-2025-52278

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316...

TP-Link WR940N 安全漏洞

The TP-Link WR940N is a wireless router from China P&L TP-Link. A security vulnerability exists in TP-Link WR940N 3.20.1 Build 200316 and earlier versions, which originates from uninitialized pointer access and could lead to denial of service and execution of arbitrary code...