11 matches found
EUVD-2024-54486
Malicious code in bioql PyPI...
The vulnerability of the microprogrammed software of the Think Router Tk-Rt-Wr135G lies in its dependence on cookie files without any checks for their authenticity and integrity. This allows attackers to bypass the authentication process.
The vulnerability of the microprogramming software of Think Router Tk-Rt-Wr135G is related to the reliance on cookie files without checking their authenticity and integrity. Exploiting this vulnerability could allow a hacker to bypass the authentication process...
CVE-2024-55211
An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie...
CVE-2024-55211
An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie...
CVE-2024-55211
An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie...
PT-2025-17211 · Unknown · Think Router Tk-Rt-Wr135G
Name of the Vulnerable Software and Affected Versions: Think Router Tk-Rt-Wr135G version 3.0.2-X000 Description: The issue allows attackers to bypass authentication via a crafted cookie. Recommendations: For Think Router Tk-Rt-Wr135G version 3.0.2-X000, as a temporary workaround, consider...
CVE-2024-55211: Reliance on Cookies without Validation and Integrity Checking
An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie...
Think Router Tk-Rt-Wr135G 安全漏洞
Think Router Tk-Rt-Wr135G is a router from Think. A security vulnerability exists in the Think Router Tk-Rt-Wr135G version V3.0.2-X000, which originates from an authentication bypass that can be accomplished with a specially crafted cookie...
CVE-2024-55211
An issue in Think Router Tk-Rt-Wr135G V3.0.2-X000 allows attackers to bypass authentication via a crafted cookie...
CVE-2024-55211
The Think Router Tk-Rt-Wr135G (Firmware V3.0.2-X000 ) is vulnerable to an authentication bypass because it relies on cookie files without verifying their authenticity or integrity . An attacker can bypass the login form by modifying the LoginStatus cookie value from "false" to "true," granting un...