9932 matches found
SonicWall SMA1000 12.5.0-02952 Check
SonicWall SMA1000 versions through 12.4.3-03526 and 12.5.0-02952 contain an authenticated remote code execution vulnerability. This offline tool assesses operator-supplied version evidence without contacting targets or testing exploitability. https://packetstorm.news/download/237489...
CVE-2026-115797
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...
CVE-2026-115796
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...
CVE-2026-115797 Tenda F6 Web Management cleartext transmission
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...
CVE-2026-115797
A weakness in the Web Management Interface of Tenda F6 (version 12.02.01.73) allows for the cleartext transmission of sensitive information . By manipulating the ecos_pw argument, an attacker can trigger this exposure. The attack is launched remotely and is characterized by high complexity with d...
EUVD-2026-109146
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...
CVE-2026-115797 Tenda F6 Web Management cleartext transmission
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecospw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...
EUVD-2026-109132
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...
CVE-2026-115796 Tenda F6 Web Management cross-site request forgery
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...
CVE-2026-115796
A security flaw exists in the Web Management Interface of the Tenda F6 (version 12.02.01.73 ), leading to a cross-site request forgery (CSRF) . An attacker can initiate this attack remotely by manipulating an unknown function within the interface. The vulnerability involves a missing authorizatio...
CVE-2026-115796 Tenda F6 Web Management cross-site request forgery
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...
EUVD-2026-108545
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...
PT-2026-122209
A weakness has been identified in Tenda F6 12.02.01.73. Affected is an unknown function of the component Web Management Interface. Executing a manipulation of the argument ecos pw can lead to cleartext transmission of sensitive information. The attack may be launched remotely. This attack is...
Tenda f6 encryption issue vulnerability
The Tenda f6 running version 12.02.01.73 contains an encryption vulnerability. This vulnerability stems from improper handling of the ecospw parameter in the Web Management Interface component, potentially leading to the transmission of sensitive information in plain text...
Tenda f6 cross-site request forgery vulnerability
The Tenda f6 running version 12.02.01.73 contains a security vulnerability stemming from improper handling of unknown functions within the Web Management Interface component; this makes it susceptible to cross-site request forgery attacks...
PT-2026-122208
A security flaw has been discovered in Tenda F6 12.02.01.73. This impacts an unknown function of the component Web Management Interface. Performing a manipulation results in cross-site request forgery. The attack may be initiated remotely. The exploit has been released to the public and may be us...
CVE-2026-96616
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...
CVE-2026-96616
The Kiloview E3 NDI Encoder is vulnerable to Insufficient Session Expiration (CWE-613) within its web management interface. The root cause is that authentication tokens issued upon login are configured with an expiration time so extended that they effectively become non-expiring . If an attacker ...
CVE-2026-96616 Kiloview E3 NDI Encoder Insufficient Session Expiration
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...
CVE-2026-96616 Kiloview E3 NDI Encoder Insufficient Session Expiration
Authentication tokens issued by the E3's web management interface on login are given an expiration time far beyond any reasonable session lifetime, effectively making them non-expiring. A token obtained through interception or device compromise remains valid for authenticated access for an extend...