CVE-2018-25318 Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change

Tenda FH303/A300 firmware V5.07.68EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS...

Tenda FH303和Tenda A300 安全漏洞

Both the Tenda FH303 and Tenda A300 are wireless routers produced by the Chinese company Tenda. The Tenda FH303 and Tenda A300 V5.07.68EN versions contain security vulnerabilities. These vulnerabilities stem from session-related weaknesses, allowing unauthenticated attackers to modify DNS setting...

多款BirdDog产品跨站请求伪造漏洞

BirdDog STUDIO R3 and others are products of BirdDog Inc.BirdDog STUDIO R3 is a camera.BirdDog 4K QUAD is a camera.BirdDog MINI is a video encoder. A cross-site request forgery vulnerability exists in BirdDog STUDIO R3, 4K QUAD, MINI, and A300 EYES. An attacker could use this vulnerability to...

Tenda FH303/A300 Firmware V5.07.68_EN - Remote DNS Change Vulnerability

Exploit for asp platform in category web applications Tenda FH303/A300 Firmware V5.07.68EN Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually...

Tenda FH303/A300 Firmware v5.07.68_EN - Remote DNS Change

Tenda FH303/A300 Firmware V5.07.68EN Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by cybercriminals. Users with vulnerable syste...

Tenda FH303/A300 5.07.68_EN Remote DNS Changer

Tenda FH303/A300 Firmware V5.07.68EN Cookie Session Weakness Remote DNS Change PoC Copyright 2018 c Todor Donev https://ethical-hacker.org/ https://facebook.com/ethicalhackerorg Once modified, systems use foreign DNS servers, which are usually set up by cybercriminals. Users with vulnerable syste...