Lucene search
+L

603 matches found

zdt
zdt
•added 2021/04/21 12:00 a.m.•101 views

Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access) Vulnerability

Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery Enable Remote Access Exploit Author: Rodolfo Mariano Version: Firmware V02.03.01.45pt CVE: CVE-2021-31152 Exploit code: document.forms0.submit; 0day.today 2021-10-25...

8.8CVSS0.4AI score0.03753EPSS
SaveExploits6
Packet Storm
Packet Storm
•added 2021/04/21 12:00 a.m.•473 views

Multilaser Router RE018 AC1200 Cross Site Request Forgery

Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery Enable Remote Access Date: 14/04/2021 Exploit Author: Rodolfo Mariano Version: Firmware V02.03.01.45pt CVE: CVE-2021-31152 Exploit code: document.forms0.submit;...

0.3AI score0.03753EPSS
SaveExploits6
Exploit DB
Exploit DB
•added 2021/04/21 12:00 a.m.•469 views

Multilaser Router RE018 AC1200 - Cross-Site Request Forgery (Enable Remote Access)

Exploit Title: Multilaser Router RE018 AC1200 - Cross-Site Request Forgery Enable Remote Access Date: 14/04/2021 Exploit Author: Rodolfo Mariano Version: Firmware V02.03.01.45pt CVE: 2021-31152 Exploit Code: document.forms0.submit;...

8.8CVSS8.2AI score0.03753EPSS
SaveExploits6
NVD
NVD
•added 2021/04/14 2:15 p.m.•55 views

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

8.8CVSS0.03753EPSS
SaveExploits6References3
attackerkb
attackerkb
•added 2021/04/14 2:15 p.m.•9 views

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

8.8CVSS6.1AI score0.03753EPSS
SaveExploits6References4
Cvelist
Cvelist
•added 2021/04/14 12:00 a.m.•68 views

CVE-2021-31152

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

9AI score0.03753EPSS
SaveExploits6References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/14 12:00 a.m.•6 views

CVE-2021-31152: Cross-Site Request Forgery (CSRF)

Multilaser Router AC1200 V02.03.01.45pt contains a cross-site request forgery CSRF vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers...

8.8CVSS5.7AI score0.03753EPSS
SaveExploits6References2
CVE
CVE
•added 2021/04/14 12:00 a.m.•130 views

CVE-2021-31152

CVE-2021-31152 affects Multilaser Router AC1200 V02.03.01.45_pt. The issue is a cross-site request forgery (CSRF) vulnerability in the router’s web interface that can enable remote access and allow changes to passwords and other settings via misconfigured requests/headers. Exploit examples (RE018...

8.8CVSS8.7AI score0.03753EPSS
SaveExploits6References3Affected Software1
CNNVD
CNNVD
•added 2021/04/14 12:00 a.m.•15 views

Multilaser Router AC1200 跨站请求伪造漏洞

The Multilaser Router AC1200 is a router from Multilaser. The Multilaser Router AC1200 V02.03.01.45pt suffers from a cross-site request forgery vulnerability that can be exploited by an attacker to enable remote access, change passwords, and perform other actions via misconfigured requests,...

8.8CVSS5.5AI score0.03753EPSS
SaveExploits6References5
OSV
OSV
•added 2021/01/26 6:16 p.m.•17 views

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

5.4CVSS6AI score0.02506EPSS
SaveExploits3References2
NVD
NVD
•added 2021/01/26 6:16 p.m.•40 views

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

5.4CVSS6.1AI score0.02506EPSS
SaveExploits3References2
Prion
Prion
•added 2021/01/26 6:16 p.m.•23 views

Cross site scripting

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

4.3CVSS5.9AI score0.02506EPSS
SaveExploits3References2Affected Software1
attackerkb
attackerkb
•added 2021/01/26 6:16 p.m.•22 views

CVE-2021-3186

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

5.4CVSS6.6AI score0.02506EPSS
SaveExploits3References3
Packet Storm
Packet Storm
•added 2021/01/26 12:00 a.m.•279 views

Tenda AC5 AC1200 Wireless Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

6.4AI score0.02506EPSS
SaveExploits3
Exploit DB
Exploit DB
•added 2021/01/26 12:00 a.m.•268 views

Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting

Exploit Title: Tenda AC5 AC1200 Wireless - 'WiFi Name & Password' Stored Cross Site Scripting Exploit Author: Chiragh Arora Hardware Model: Tenda AC5 AC1200 Firmware version: V15.03.06.47multi Tested on: Kali Linux CVE ID: CVE-2021-3186 Date: 25.01.2021 Steps to Reproduce - - Navigate to the Tend...

5.4CVSS6.2AI score0.02506EPSS
SaveExploits3
CVE
CVE
•added 2021/01/24 7:35 p.m.•104 views

CVE-2021-3186

CVE-2021-3186 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Tenda AC5 AC1200 router, specifically in the /main.html Wifi Settings page where the Wifi Name parameter can be exploited to inject arbitrary script/HTML. Affected firmware version is V15.03.06.47_multi. Public refer...

5.4CVSS6AI score0.02506EPSS
SaveExploits3References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/24 12:00 a.m.•5 views

CVE-2021-3186: Improper Neutralization of Input During Web Page Generation

A Stored Cross-site scripting XSS vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter...

5.4CVSS6AI score0.02506EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
•added 2021/01/24 12:00 a.m.•19 views

PT-2021-19554 · Tenda · Tenda Ac5 Ac1200

Name of the Vulnerable Software and Affected Versions: Tenda AC5 AC1200 version V15.03.06.47 multi Description: A Stored Cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter in the Wifi Settings, specifically in the...

5.4CVSS6AI score0.02506EPSS
SaveExploits3References6
OSV
OSV
•added 2020/12/30 9:15 p.m.•17 views

CVE-2020-28095

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

7.5CVSS7.2AI score0.01171EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/30 9:15 p.m.•48 views

CVE-2020-28095

On Tenda AC1200 Model AC6 15.03.06.51multi devices, a large HTTP POST request sent to the change password API will trigger the router to crash and enter an infinite boot loop...

7.8CVSS7.6AI score0.01171EPSS
SaveExploits1References1
Rows per page
Query Builder