Thottysploity

**Name of the Vulnerable Software and Affected Versions** TP-Link Archer Series routers TP-Link Deco Series routers TP-Link Tapo Series routers **Description** An authenticated remote code execution (RCE) issue exists in the `tmp get sites` function of the HomeShield functionality provided by TP-Link. This issue is exploitable even without the installation or activation of the HomeShield functionality. The vulnerability is due to a lack of request parameter validation. The `tmp get sites` function appears to be susceptible to command injection, potentially allowing an attacker to execute arbitrary commands remotely. **Recommendations** TP-Link Archer Series routers: At the moment, there is no information about a newer version that contains a fix for this vulnerability. TP-Link Deco Series routers: At the moment, there is no information about a newer version that contains a fix for this vulnerability. TP-Link Tapo Series routers: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** CyberPanel versions prior to 2.3.8 **Description** The issue exists due to the lack of measures to neutralize special elements, allowing a remote attacker to execute arbitrary commands using a specially crafted HTTP OPTIONS request. This can be achieved by exploiting shell metacharacters in the `phpSelection` field to the "websites/submitWebsiteCreation" URI. It is estimated that over 870,000 services are potentially affected. **Recommendations** For versions prior to 2.3.8, update to version 2.3.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the `phpSelection` field in the "websites/submitWebsiteCreation" URI until a patch is available. Avoid using the `phpSelection` field in the affected API endpoint until the issue is resolved.