178 matches found
Malicious code in @zalastax/nolb-f3 (npm)
The package @zalastax/nolb-f3 was found to contain malicious code...
MAL-2025-11418 Malicious code in @zalastax/nolb-f3 (npm)
The package @zalastax/nolb-f3 was found to contain malicious code...
CVE-2024-25343
Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...
CVE-2020-35391
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...
HMS Networks Anybus X-Gateway AB7832-F3 Security Vulnerability
HMS Networks Anybus X-Gateway AB7832-F3 is an industrial gateway from HMS Networks. A security vulnerability exists in the HMS Networks Anybus X-Gateway AB7832-F3 that stems from the HICP protocol that allows unauthenticated changes to the device's network configuration...
CVE-2024-25343
Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...
CVE-2024-25343
Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...
CVE-2024-25343
Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...
PT-2024-20893 · Tenda · Tenda N300 F3
Name of the Vulnerable Software and Affected Versions: Tenda N300 F3 router affected versions not specified Description: The issue allows users to bypass the intended security policy and create weak passwords. Recommendations: At the moment, there is no information about a newer version that...
CVE-2024-25343
A security vulnerability exists in the Tenda N300 F3 wireless router, which allows users to bypass intended security policies and create weak passwords . While the specific root cause and affected firmware versions are not provided in the documents, the vulnerability is associated with improper p...
CVE-2024-25343: Improper Privilege Management
Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords...
f3-h.de Improper Access Control vulnerability OBB-3816766
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
f3-h.de Improper Access Control vulnerability OBB-3766925
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Tenda N300 F3 12.01.01.48 Header Processing
!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Date: 09/03/2023 Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...
Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Exploit
!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...
Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing
!/usr/bin/python3 Exploit Title: Tenda N300 F3 12.01.01.48 - Malformed HTTP Request Header Processing Shodan Dork: http.favicon.hash:-2145085239 http.title:"Tenda | LOGIN" Date: 09/03/2023 Exploit Author: @h454nsec Github: https://github.com/H454NSec/CVE-2020-35391 Vendor Homepage:...
CVE-2020-35391
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...
CVE-2020-35391
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...
Design/Logic Flaw
Tenda N300 F3 12.01.01.48 devices allow remote attackers to obtain sensitive information possibly including an httppasswd line via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg, a related issue to CVE-2017-14942. NOTE: the vulnerability report may suggest that either a ? character must b...
CVE-2020-35391
The Tenda N300 F3 router (specifically firmware version 12.01.01.48 ) is vulnerable to an authentication bypass due to improper malformed HTTP request header processing . A remote attacker can obtain sensitive information, such as the RouterCfm.cfg configuration file, which may contain the http_p...