Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 00:41:14 +0000 CVE-2018-25318 — Tenda FH303/A300 V5.07.68_EN Cookie Session Weakness DNS Change https://vulnerability.circl.lu/vuln/cve-2018-25318 <p><strong>Affected:</strong> Tenda FH303/A300</p> <p>Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites.</p> <p><strong>Affected:</strong> Tenda FH303/A300</p> <p>Tenda FH303/A300 firmware V5.07.68_EN contains a session weakness vulnerability that allows unauthenticated attackers to modify DNS settings by exploiting insufficient cookie validation. Attackers can send GET requests to the /goform/AdvSetDns endpoint with a crafted admin cookie to change DNS servers and redirect user traffic to malicious sites.</p> https://vulnerability.circl.lu/vuln/cve-2018-25318