CVE-2025-40634

This repository contains a working exploit for CVE-2025-40634, a stack-based buffer overflow in the TP-Link Archer AX50 router's `conn-indicator` binary, leading to remote code execution. The exploit leverages a crafted DNS response to overflow a buffer in the `DNS_answer_parser` function.

The repository contains a functional exploit for CVE-2025-40634, demonstrating a command injection vulnerability in TP-Link Tapo c200 IP cameras. The exploit leverages insufficient input validation in the `setLanguage` method to achieve unauthenticated remote code execution.