Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)

Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery Enable Remote Access Date: 14/04/2021 Exploit Author: Rodolfo Mariano Version: Firmware V02.03.01.45pt CVE: 2021-31152 Exploit Code: document.forms0.submit;...

Multilaser Router RE018 AC1200 Cross Site Request Forgery

Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery Enable Remote Access Date: 14/04/2021 Exploit Author: Rodolfo Mariano Version: Firmware V02.03.01.45pt CVE: CVE-2021-31152 Exploit code: document.forms0.submit;...

Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access) Vulnerability

Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery Enable Remote Access Exploit Author: Rodolfo Mariano Version: Firmware V02.03.01.45pt CVE: CVE-2021-31152 Exploit code: document.forms0.submit; 0day.today 2021-10-25...

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

CVE-2021-31152

CVE-2021-31152 affects Multilaser Router AC1200 V02.03.01.45_pt. The issue is a cross-site request forgery (CSRF) vulnerability in the router’s web interface that can enable remote access and allow changes to passwords and other settings via misconfigured requests/headers. Exploit examples (RE018...

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

Multilaser Router AC1200 跨站请求伪造漏洞

The Multilaser Router AC1200 is a router from Multilaser. The Multilaser Router AC1200 V02.03.01.45pt suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to enable remote access, change passwords, and perform other actions via misconfigured requests,...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

Cross site scripting

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

Tenda AC5 AC1200 Wireless Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

CVE-2021-3186

CVE-2021-3186 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Tenda AC5 AC1200 router, specifically in the /main.html Wifi Settings page where the Wifi Name parameter can be exploited to inject arbitrary script/HTML. Affected firmware version is V15.03.06.47_multi. Public refer...

PT-2021-19554 · Tenda · Tenda Ac5 Ac1200

Name of the Vulnerable Software and Affected Versions: Tenda AC5 AC1200 version V15.03.06.47 multi Description: A Stored Cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter in the Wifi Settings, specifically in the...

CVE-2020-28095

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

CVE-2020-28095

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

Design/Logic Flaw

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

CVE-2020-28095

The CVE-2020-28095 entry applies to Tenda AC1200 (Model AC6) with firmware 15.03.06.51_multi. The vulnerability is triggered by sending a large HTTP POST to the change password API, causing the router to crash and enter an infinite boot loop. Documents confirm this affects the Change Password API...