CVE-2024-55211

CVE-2024-55211 Tk-Rt-Wr135G 上的基于Cookie的身份验证漏洞 受影响供应商 ：Think Technology 受影响产品 ：无线路由器 Ac 1199Mbps Tk-Rt-Wr135G 受影响版本 ：固件 V3.0.2-X000 描述 该漏洞允许绕过路由器 TK-RT-WR135G 的登录表单，使攻击者能够更改为路由器设计的任何配置。 这是通过更改 LoginStatus cookie 的值实现的，将其初始值 "false" 改为 "true"，从而使用户在设定的时间段内保持登录状态。 利用 可通过网络浏览器的控制台或 cookie 检查器进行利用。 攻击...

EUVD-2023-37710

Malicious code in bioql PyPI...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

Authentication flaw

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

Planet WDRT-1800AX 授权问题漏洞

The Planet WDRT-1800AX is a wireless router from Planet China. A security vulnerability exists in Planet WDRT-1800AX version 1.01-CP21, which originated from a vulnerability that allows an attacker to bypass authentication and elevate privileges to root by manipulating the LoginStatus cookie...