Elektrine
Log in Register

#tplink

9 posts · Last used Sep 07

BadChemical @BadChemical@infosec.exchange
· 1mo ago
Boosted by @trending@homestead.social
The LG TV network scanning story breaking today includes UDP 9999 Kasa discovery broadcasts every 25 seconds. That's the exact port I documented in CVE-2026-13230 as returning unauthenticated precise GPS coordinates from Kasa cameras with no authentication. Any LG TV + unpatched Kasa camera on the same network = GPS harvesting every 25 seconds. @briankrebs@infosec.exchange Advisory: https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md #Iot #CVE #TPlink #LG #infosec
GitHub

IoT-Vulnerability-Research-Public/TP-Link_Kasa_EC71/Kasa_EC71.md at main · BadChemical/IoT-Vulnerability-Research-Public

Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws. - BadChemical/IoT-Vulnerability-Research-Public

133
0
185
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
A TP-Link Kasa vulnerability (CVE-2026-9770) lets local attackers steal admin credentials via a hardcoded key. Patch your EC70 and EC71 firmware now. #TPLink #Kasa #CVE20269770 #IoTSecurity #Cameras #ManInTheMiddle https://meterpreter.org/tp-link-kasa-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social
TP-Link Kasa Vulnerability Exposes EC70 and EC71 Cameras
Information Security News

TP-Link Kasa Vulnerability Exposes EC70 and EC71 Cameras

A TP-Link Kasa vulnerability (CVE-2026-9770) lets local attackers steal admin credentials via a hardcoded key. Patch your EC70 and EC71 firmware now.

0
0
0
0
Hacker News @h4ckernews@mastodon.social
· 2mo ago
TP-Link Kasa cameras leaked home GPS via unauthenticated UDP for 6 years https://github.com/BadChemical/IoT-Vulnerability-Research-Public/blob/main/TP-Link_Kasa_EC71/Kasa_EC71.md Comments: https://news.ycombinator.com/item?id=48952565 #HackerNews #TPLink #Kasa #IoT #Vulnerability #HomeSecurity #CyberSecurity #Privacy
GitHub

IoT-Vulnerability-Research-Public/TP-Link_Kasa_EC71/Kasa_EC71.md at main · BadChemical/IoT-Vulnerability-Research-Public

Independent IoT security research, vulnerability disclosures, and PoCs focusing on firmware analysis, hardware interfaces, and cryptographic flaws. - BadChemical/IoT-Vulnerability-Research-Public

0
0
2
0
Daily CyberSecurity @DailyCyberSecurity@infosec.exchange
· 2mo ago
TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now. #TPLink #Kasa #IoTSecurity #CVE20269770 #InfoDisclosure https://securityonline.info/tp-link-kasa-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social
CVE-2026-9770: Information Disclosure Vulnerability Exposes Admin Credentials on TP-Link Kasa Cameras
Daily CyberSecurity

CVE-2026-9770: Information Disclosure Vulnerability Exposes Admin Credentials on TP-Link Kasa Cameras

TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.

0
0
0
0
Michael Koerfer @OT_MacDonald@infosec.exchange
· 2mo ago
U-Boot, a widely used open-source bootloader, is reported to contain six security vulnerabilities that allow attackers to run malicious code or crash devices during the boot process. The flaws are in the Flattened Image Tree (FIT) signature verification mechanism, which ensures that only trusted firmware images load. Because the vulnerabilities trigger before the operating system starts, they can bypass standard security protections and allow for persistent malware setup. https://beyondmachines.net/event_details/u-boot-bootloader-flaws-allow-stealthy-pre-boot-code-execution-b-d-7-x-u/gD2P6Ple2L #openwrt #cybersecurity #tplink #glinet
U-Boot Bootloader Flaws Allow Stealthy Pre-Boot Code Execution
BeyondMachines

U-Boot Bootloader Flaws Allow Stealthy Pre-Boot Code Execution

Binarly researchers discovered six vulnerabilities in the U-Boot bootloader's FIT signature verification process that allow for arbitrary code execution and denial of service. These flaws affect over 50 stable releases since 2013 and can be exploited to install persistent firmware malware.

0
0
0
0
ROOTBLOG @ROOTBLOG@101010.pl
· 3mo ago
🆕TP-Link Deco X10-5G z oficjalną premierą! Internet bez światłowodu przestaje być problemem ➡️https://rootblog.pl/tp-link-deco-x10-5g-debiutuje-na-polskim-rynku/ #5G #DecoX105G #HomeShield #Mesh #router #TPLink #TPLinkDecoX105G #wifi6
TP-Link Deco X10-5G z oficjalną premierą! Internet bez światłowodu przestaje być problemem
ROOTBLOG.pl

TP-Link Deco X10-5G z oficjalną premierą! Internet bez światłowodu przestaje być problemem

TP-Link Deco X10-5G trafił do sprzedaży. Nowa brama sieciowa z modemem 5G i Wi-Fi 6 oferuje obsługę Mesh, funkcję failover, HomeShield oraz możliwość podłączenia nawet 120 urządzeń.

0
0
0
0
BrianKrebs @briankrebs@infosec.exchange
· 5mo ago
New, by me: Anti-DDoS Firm Heaped Attacks on Brazilian ISPs A Brazilian tech firm that specializes in protecting networks from distributed denial-of-service (DDoS) attacks has been enabling a botnet responsible for an extended campaign of massive DDoS attacks against other network operators in Brazil, KrebsOnSecurity has learned. The firm’s chief executive says the malicious activity resulted from a security breach and was likely the work of a competitor trying to tarnish his company’s public image. https://krebsonsecurity.com/2026/04/anti-ddos-firm-heaped-attacks-on-brazilian-isps/ #ddos #tplink #hugenetworks #brazil
krebsonsecurity.com

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs – Krebs on Security

58
9
64
0
You've seen all posts