ZTE_F460 /manager_dev_config_t.gch 信息泄漏漏洞

No description provided by source...

CVE-2014-4154

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js...

CVE-2014-4018

The ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...

Default credentials

The ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-4018

The ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK has a default password of admin for the admin account, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-4154

ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js...

CVE-2014-4154

The CVE-2014-4154 entry concerns the ZTE ZXV10 W300 router (firmware W300V1.0.0a_ZRD_LK). The issue is improper access control that stores sensitive information under the web root, enabling remote attackers to retrieve the PPPoE/PPPoA password via a direct request to basic/tc2wanfun.js. The docum...

CVE-2014-4018

The CVE-2014-4018 entry concerns the ZTE ZXV10 W300 router with firmware W300V1.0.0a_ZRD_LK, where the admin account uses a default password of admin. This enables remote attackers to obtain access via unspecified vectors (CVSSv2 base score 7.8, vector AV:N/AC:L/Au:N/C:N/I:C/A:N). The vulnerabili...

ZTE and TP-Link RomPager - DoS Exploit

No description provided by source. !/usr/bin/env python -- coding: utf-8 -- Exploit Title: ZTE and TP-Link RomPager DoS Exploit Date: 10-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 TP-Link TD-W8901G TP-Link TD-W8101G TP-Link TD-8840G Firmware:...

ZTE Change admin password

No description provided by source. Exploit Title: ZTE Change admin password Author: Nuevo Asesino Version: ZTE Inc., Software Release ZXDSL 831IIV7.5.0aZ29OV html body onload=javascript:document.forms0.submit H2Exploit By Nuevo Asesino /H2 form method=POST name=form0...

ZTE ZXDSL 831IIV7.5.0a_Z29_OV Multiple Vulnerabilities

No description provided by source. Exploit Title: ZTE ZXDSL 831IIV7.5.0aZ29OV Multiple vulnerabilities Date: 28 / 10 / 2011 . Authors: Mehdi Boukazoula ; Ibrahim Debeche . Software Link with patch : Version: v 831IIV7.5.0aZ29OV Tested on: v 831IIV7.5.0aZ29OV, May Affect all ZTE routers !!...

ZTE WXV10 W300 - Multiple Vulnerabilities

No description provided by source. Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities Date: 17-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 Firmware: W300V1.0.0aZRDLK ADSL Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x8664 Exploit...

ZTE ZXV10 W300 Router - Hardcoded Credentials

No description provided by source. Exploit Title: ZTE ZXV10 W300 router contains hardcoded credentials Date: 03 Feb 2014 Exploit Author: Cesar Neira Vendor Homepage: http://wwwen.zte.com.cn/ Version: ZTE ZXV10 W300 v2.1 CVE : CVE-2014-0329 Dork Shodan: Basic realm=index.htm References:...

ZTE WXV10 W300 Multiple Vulnerabilities (Jan 2014) - Active Check

ZTE WXV10 W300 router is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-4155

Cross-site request forgery CSRF vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/toolsadmin1...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/toolsadmin1...

CVE-2014-4155

Cross-site request forgery CSRF vulnerability in the ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK allows remote attackers to hijack the authentication of administrators for requests that change the admin password via a request to Forms/toolsadmin1...

CVE-2014-4155

CVE-2014-4155 affects the ZTE WXV10 W300 router (firmware W300V1.0.0a_ZRD_LK). It is a CSRF flaw in the admin interface (Forms/tools_admin_1) allowing remote attackers to hijack administrator authentication and change the admin password. Root cause: CSRF in admin form handling. Exploitation detai...

ZTE WXV10 W300 - Multiple Vulnerabilities

ZTE WXV10 W300 - Multiple Vulnerabilities Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities Date: 17-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 Firmware: W300V1.0.0aZRDLK ADSL Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x8664...

ZTE WXV10 W300 - Multiple Vulnerabilities

Exploit Title: ZTE WXV10 W300 Multiple Vulnerabilities Date: 17-05-2014 Server Version: RomPager/4.07 UPnP/1.0 Tested Routers: ZTE ZXV10 W300 Firmware: W300V1.0.0aZRDLK ADSL Firmware: FwVer:3.11.2.175TC3086 HwVer:T14.F75.0 Tested on: Kali Linux x8664 Exploit Author: Osanda Malith Jayathissa...