CVE-2024-53375

An Authenticated Remote Code Execution (RCE) vulnerability affects the TP-Link Archer router series. A vulnerability exists in the "tmp_get_sites" function of the HomeShield functionality provided by TP-Link. This vulnerability is still exploitable without the activation of the HomeShield functionality.

• CWE-78

• https://github.com/ThottySploity/CVE-2024-53375
• https://thottysploity.github.io/posts/cve-2024-53375/

Published

Dec 2, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-53357Multiple SQL injection vulnerabilities in EasyVirt DCScope <…7.5
• CVE-2024-53359An issue in Zalo v23.09.01 allows attackers to obtain sensit…7.5
• CVE-2024-5336A vulnerability has been found in Ruijie RG-UAC up to 202405…7.2
• CVE-2024-53364A SQL injection vulnerability was found in PHPGURUKUL Vehicl…5.4
• CVE-2024-53365A stored cross-site scripting (XSS) vulnerability was identi…5.4
• CVE-2024-5337A vulnerability was found in Ruijie RG-UAC up to 20240516 an…7.2
• CVE-2024-53376CyberPanel before 2.3.8 allows remote authenticated users to…8.8
• CVE-2024-53379Heap buffer overflow in the server site handshake implementa…7.5
• CVE-2024-5338A vulnerability was found in Ruijie RG-UAC up to 20240516. I…7.2
• CVE-2024-53382Prism (aka PrismJS) through 1.29.0 allows DOM Clobbering (wi…5.4
• CVE-2024-53384A DOM Clobbering vulnerability in tsup v8.3.4 allows attacke…5.1
• CVE-2024-53386Stage.js through 0.8.10 allows DOM Clobbering (with resultan…6.1