do4choo/cve-2026-3227-tp-link-authenticated-rceProof-of-concept for authenticated OS command injection in TP-Link router firmware. Includes decryption, QEMU-based encryption hook, and 15-character…
elbertavares/routers-exploitProof-of-concept exploits for TP-Link routers, including remote command execution and authentication bypass vulnerabilities.
eyjhb/blackvue-cve-2023BlackVue DR750 CVE CVE-2023-27746 CVE-2023-27747 CVE-2023-27748
seifallahhomrani1/cve-2023-0861-pocAnalyzing and Reproducing the Command Injection Vulnerability (CVE-2023-0861) in NetModule Routers
minanagehsalalma/cve-2026-6837-zyxel-export-cgi-command-injectionPublic writeup, PoC, and emulation materials for CVE-2026-6837 affecting Zyxel export-cgi PKCS#12 export handling.
jiansiting/cve-2019-10915Proof-of-concept exploit for CVE-2019-10915 targeting an authentication bypass in Siemens TIA Administrator, enabling remote command execution via…
4d000/tenda-f3-v4Python script to exploit CVE-2020-35391 on Tenda F3 V3/V4 routers, enabling unauthorized download of configuration, flash, and syslog files.
badnack/d_link_880_bugStatic analysis of D-Link router firmware revealing buffer overflow vulnerabilities in HTTP handling, including CVE-2017-14948, with disassembly and…
xernary/cve-2025-63821Proof-of-concept of vulnerability found in Totolink A720R router
zwclose/cve-2021-26258PoC exploit and tooling for CVE-2021-26258, including a custom storage file packer/unpacker and a MITM web server to deliver malicious updates to…
l41kaa/cve-2024-48705Post-authentication command injection exploit for Wavlink AC1200 routers. Leverages improper input sanitization in adm.cgi to execute arbitrary shell…
garis/fastgateDetailed analysis of CVE-2019-12489 command injection in Fastgate modem/router firmware, including firmware extraction, reverse engineering with…
nahueldsanchez/blogpost_cve-2018-19987-analysisThis repo has a blog post about my analysis for CVE-2018-19987 an authenticated OS command injection affecting multiple D-Link routers
micaelmaciel/cve-2024-55211Cookie-based authentication vulnerability on Tk-Rt-Wr135G
234329a423853/cve-2021-4045Proof-of-concept and analysis for CVE-2021-4045, a command injection RCE in the TP-Link Tapo C200 IP camera's uhttpd affecting firmware prior to…
scorpion-security-labs/cve-2020-12124Proof-of-concept exploit for CVE-2020-12124 targeting Wavlink AC1200 router, demonstrating unauthenticated command injection and stack buffer…
kaisersource/cve-2021-3166Proof-of-concept exploit for CVE-2021-3166 targeting ASUS DSL-N14U routers via malicious firmware upload, triggering a denial-of-service condition.
