Tenda N300 Resource Management Error Vulnerability

The Tenda N300 is a router from the Chinese company Tenda. A security vulnerability exists in Tenda N300 F3 12.01.01.48, which allows remote attackers to obtain sensitive information possibly including http password lines via a direct request to cgi-bin DownloadCfg RouterCfm...

VulnCheck KEV: CVE-2019-19356

Netis WF2419 devices contains an unspecified vulnerability that allows an attacker to perform remote code execution as root through the router's web management page...

Weak Password Vulnerability in the Router Management System of Chengdu Netflag Yunke Information Technology Co.

Chengdu Netflag Yunke Information Technology Co., Ltd. is mainly dedicated to the research, development, production and sales of authentication, billing, flow control, wireless, POE products. There is a weak password vulnerability in the router management system of Chengdu Netflag Router Manageme...

CVE-2019-16326

D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...

CVE-2019-16326

CVE-2019-16326 affects the D-Link DIR-601 B1 (firmware 2.00NA). It describes a CSRF vulnerability due to absence of an anti‑CSRF token, enabling potential remote router management when combined with CVE-2019-16327. The end‑of‑life DIR‑601 B1 is noted in the entry. The connected documents also ref...

CVE-2019-16326

D-Link DIR-601 B1 2.00NA devices have CSRF because no anti-CSRF token is implemented. A remote attacker could exploit this in conjunction with CVE-2019-16327 to enable remote router management and device compromise. NOTE: this is an end-of-life product...

CVE-2019-17507

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

Code injection

An issue was discovered on D-Link DIR-816 A1 1.06 devices. An attacker could access management pages of the router via a client that ignores the 'top.location.href = "/dirlogin.asp"' line in a .asp file. This provides access to dstatus.asp, version.asp, ddhcptbl.asp, and dacl.asp...

Tenda portable router save 0DAY vulnerabilities hackers can steal the privacy-vulnerability warning-the black bar safety net

9 on 1 5 May, just on the line rising vulnerability platform to the following address: a http://loudong.rising.com.cn to exposed Tenda router 4G301 model the presence of memory-typeXSScross-site scripting vulnerability vulnerability number: RSV-2 0 1 4-0 0 1 River. Rising security experts, the...

Sagem Fast 3304-V2 Authentication Bypass

Title : Sagem F@st 3304-V2 Authentification Bypass Vendor : http://www.sagemcom.com Severity : High Tested on : Firefox, Google Chrome, Internet Explorer Tested Router : Sagem F@st 3304-V2 3304, 3464, 3504 may also be affected Date : 2014-09-04 Author : Yassine Aboukir Contact : [email protected]...

[PT-2011-29] Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300

---------------------------------------------------------------------- PT-2011-29 Positive Technologies Security Advisory Arbitrary file reading and arbitrary code execution in Router Manager for D-Link DIR-300. ---------------------------------------------------------------------- ---Vulnerable...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...

CVE-2007-6730

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in the ZyXEL P-330W router allow remote attackers to hijack the authentication of administrators for requests that 1 enable remote router management via goform/formRmtMgt or 2 modify the administrator passwor...