CVE-2023-36620

CVE-2023-36620 affects the Boomerang Parental Control Android app prior to version 13.83. The root cause is the manifest lacking android:allowBackup="false", enabling local backups of the app’s internal memory to a PC. This backup exposure grants access to the API token used for authenticating AP...

PT-2023-27690 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description: A stack overflow issue was discovered via the mac parameter at the "/goform/GetParentControlInfo" API endpoint. This issue affects the Tenda AC8 router. Recommendations: For Tenda AC...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

Cross site scripting

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

PT-2023-13738 · Tenda · Tenda Ac6 Ac1200 Smart Dual-Band Wifi Router

Name of the Vulnerable Software and Affected Versions: Tenda AC6 AC1200 Smart Dual-Band WiFi Router version 15.03.06.50 multi Description: A cross-site scripting XSS issue was found in the Parental Control module, specifically via the deviceId parameter. This allows for potential malicious script...

Tenda AC6 跨站脚本漏洞

The Tenda AC6 is a wireless router from Tenda, China. The Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi suffers from a cross-site scripting vulnerability, which stems from a cross-site scripting XSS vulnerability found in the deviceId parameter of the Parental Control module...

Tenda AC6 AC1200 15.03.06.50_multi Cross Site Scripting

Exploit Title: Stored Cross-Site scripting in the Tenda router via the deviceId parameter in the Parental Control module Google Dork: None. Date: Aug-30-2022 Exploit Author: 0x783 Vendor Homepage: https://tendacn.com/default.html Software Link: https://www.tendacn.com/product/download/AC6.html...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

Code injection

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

Kiddoware Kids Place Parental Control for Android (≤3.8.49) is affected by CVE-2023-28153 and related issues (XSS, CSRF, file upload) per SEC Consult advisory. Fixed in 3.8.50. Upgrade to 3.8.50+ to mitigate. Exploitation details are documented in external advisories; no further in-document explo...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

Kiddoware Kids Place Parental Control Android App 3.8.49 XSS / CSRF / File Upload Vulnerabilities

======================================================================= title: Multiple Vulnerabilities product: Kiddoware Kids Place Parental Control Android App vulnerable version: =3.8.49 fixed version: 3.8.50 or higher CVE number: CVE-2023-28153, CVE-2023-29078, CVE-2023-29079 impact: High...

Sharing Netflix, Disney+, other passwords is illegal, according to new guidance

The Intellectual Property Office IPO, the UK government body overseeing intellectual property rights in the UK, has quietly released new guidance on piracy and online counterfeit goods. This campaign is a joint effort between IPO and Meta, Facebooks parent company. The general issue on piracy is...