CVE-2023-36620

CVE-2023-36620 affects the Boomerang Parental Control Android app prior to version 13.83. The root cause is the manifest lacking android:allowBackup="false", enabling local backups of the app’s internal memory to a PC. This backup exposure grants access to the API token used for authenticating AP...

CVE-2023-36621

CVE-2023-36621 affects Boomerang Parental Control App (Android) up to version 13.83. Multiple connected sources describe a stored XSS and privilege escalation vulnerability in versions prior to 13.83, with at least one issue fixed in 13.83 or later. SEC Consult and PacketStorm indicate the vulner...

CVE-2023-36621

An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing...

Boomerang Parental Control Security Vulnerability

Boomerang Parental Control is an application from Boomerang for parents to restrain their children from using electronic devices. A security vulnerability exists in the Boomerang Parental Control application prior to version 13.83 Android, which stems from the ability to use Safe Mode to...

PT-2023-27690 · Tenda · Tenda Ac8

Name of the Vulnerable Software and Affected Versions: Tenda AC8 version US AC8V4.0si V16.03.34.06 cn Description: A stack overflow issue was discovered via the mac parameter at the "/goform/GetParentControlInfo" API endpoint. This issue affects the Tenda AC8 router. Recommendations: For Tenda AC...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

Cross site scripting

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

CVE-2022-40010

Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi was discovered to contain a cross-site scripting XSS vulnerability via the deviceId parameter in the Parental Control module...

PT-2023-13738 · Tenda · Tenda Ac6 Ac1200 Smart Dual-Band Wifi Router

Name of the Vulnerable Software and Affected Versions: Tenda AC6 AC1200 Smart Dual-Band WiFi Router version 15.03.06.50 multi Description: A cross-site scripting XSS issue was found in the Parental Control module, specifically via the deviceId parameter. This allows for potential malicious script...

Tenda AC6 跨站脚本漏洞

The Tenda AC6 is a wireless router from Tenda, China. The Tenda AC6 AC1200 Smart Dual-Band WiFi Router 15.03.06.50multi suffers from a cross-site scripting vulnerability, which stems from a cross-site scripting XSS vulnerability found in the deviceId parameter of the Parental Control module...

Tenda AC6 AC1200 15.03.06.50_multi Cross Site Scripting

Exploit Title: Stored Cross-Site scripting in the Tenda router via the deviceId parameter in the Parental Control module Google Dork: None. Date: Aug-30-2022 Exploit Author: 0x783 Vendor Homepage: https://tendacn.com/default.html Software Link: https://www.tendacn.com/product/download/AC6.html...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

Code injection

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...

CVE-2023-28153

Kiddoware Kids Place Parental Control for Android (≤3.8.49) is affected by CVE-2023-28153 and related issues (XSS, CSRF, file upload) per SEC Consult advisory. Fixed in 3.8.50. Upgrade to 3.8.50+ to mitigate. Exploitation details are documented in external advisories; no further in-document explo...

CVE-2023-28153

An issue was discovered in the Kiddoware Kids Place Parental Control application before 3.8.50 for Android. The child can remove all restrictions temporarily without the parents noticing by rebooting into Android Safe Mode and disabling the "Display over other apps" permission...