CVE-2021-41730

Exécution de commande à distance – Autorisation TENDA Auteur de l’exploit : SHENGXI [email protected] Vendeur : TENDA CVE-2021-41730 - /bin/httpd Version du firmware : AC15: =USAC15V1.0BRV15.03.05.20multiTDE01.bin AC6 : USAC6V1.0BRV15.03.05.16multiTD01.bin ....... Lien matériel :...

RE11S_1.11-formAccept-CommandInjection

RE11S1.11-formAccept-CommandInjection Pendant mon stage au Qi An Xin Tiangong Lab, j'ai découvert une vulnérabilité d'injection de commandes dans le routeur RE11S1.11. En analysant le fichier webs dans le répertoire bin, j'ai constaté que la fonction formAccept contient une vulnérabilité...

CVE-2024-9570_D-Link-DIR-619L-bof

CVE-2024-9570D-Link-DIR-619L-bof Exploit pour CVE-2024-9570 Une vulnérabilité a été trouvée dans le D-Link DIR-619L B1 2.06 et classée comme critique. La fonction concernée par ce problème est formEasySetTimezone du fichier /goform/formEasySetTimezone. La manipulation de l'argument curTime condui...

Reprise License Manager 14.2 - Cross-Site Scripting

Reprise License Manager 14.2 contains a cross-site scripting vulnerability in the /goform/activateprocess "count" parameter via GET. id: CVE-2021-45422 info: name: Reprise License Manager 14.2 - Cross-Site Scripting author: edoardottt severity: medium description: | Reprise License Manager 14.2...

Reprise License Manager 14.2 - Cross-Site Scripting

Reprise License Manager 14.2 contains a reflected cross-site scripting vulnerability in the /goform/loginprocess 'username' parameter via GET, whereby no authentication is required. id: CVE-2022-28363 info: name: Reprise License Manager 14.2 - Cross-Site Scripting author: Akincibor severity: medi...

Blink Router - Command Injection

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain a command injection vulnerability via the bsSetSSIDHide function. id: CVE-2025-45985 info: name: Blin...

H3C Magic R300-2100M - Remote Code Execution

H3C Magic R300 version R300-2100MV100R004 was discovered to contain a stack overflow via the DeltriggerList interface at /goform/aspForm. id: CVE-2023-33629 info: name: H3C Magic R300-2100M - Remote Code Execution author: DhiyaneshDK severity: high description: | H3C Magic R300 version...

LB-LINK Routers - Unauthenticated Command Injection

LB-LINK X-PRO 1.0.22-20231206 contains a hardcoded credentials vulnerability caused by manipulation of an unknown function in /etc/shadow, letting remote attackers use hardcoded credentials, exploit requires high complexity id: CVE-2026-19900 info: name: LB-LINK Routers - Unauthenticated Command...

Linksys RE7000 - Command Injection

Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access control function point id: CVE-2024-25852 info: name: Linksys RE7000 - Command Injection author: s4e-io severity: high description: | Linksys RE7000 v2.0.9, v2.0.1...

CVE-2025-9090

CVE-2025-9090 المؤلف: Byte Reaper الوصف يستهدف هذا الاستغلال CVE-2025-9090 ، وهو ثغرة حقن أوامر في راوتر Tenda AC20 v16.03.08.12. الخلل موجود في النقطة النهائية /goform/telnet، والتي يمكن تشغيلها عن بُعد. عند الوصول إليها، تبدأ خدمة Telnet على الجهاز، مما يفتح المنافذ 23/2323 للتفاعل عن بُعد. يرس...

CVE-2025-7795

CVE-2025-7795 – استغلال تجاوز سعة المخزن المؤقت لموجه Tenda المؤلف : Byte Reaper تيليجرام : @ByteReaper0 CVE-ID : CVE-2025-7795 نوع الثغرة : تجاوز سعة المخزن المؤقت الهدف : موجهات Tenda الاستغلال : عن بعد، بدون مصادقة 📝 الوصف توجد ثغرة تجاوز سعة المخزن المؤقت في بعض موديلات موجهات Tenda. يمكن...

CVE-2026-6274

CVE-2026-6274 : Contournement d'authentification Redline WR3200 English | Turkish Ce dépôt contient les détails techniques et la preuve de concept PoC pour CVE-2026-6274. La vulnérabilité existe dans les routeurs Redline WR3200 versions antérieures au firmware v7.1.8 et permet à un attaquant de...

Tenda-Router-VR-and-Exploit

Tenda-Router-VR-and-Exploit Ce compte-rendu montre exactement comment j'ai émulé le serveur web du firmware AC15 V15.03.05.19 avec QEMU, l'ai rendu accessible depuis le navigateur hôte, et exploité le gestionnaire vulnérable /goform/setUsbUnload CVE-2020-10987 pour exécuter des commandes dans le...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

ZTE MF971R - Referer authentication bypass

ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click. id: CVE-2021-21745 info: name: ZTE MF971R - Referer authentication bypass...

Tenda Router AC11 - Remote Command Injection

Tenda Router AC11 is susceptible to remote command injection vulnerabilities in the web-based management interface that could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-31755 info: name: Tenda Router AC11 - Remote Comman...

Belkin Linksys RE6500 <1.0.012.001 - Remote Command Execution

Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page. id: CVE-2020-35713 info: name: Belkin Linksys RE6500 1.0.012.001 - Remote Command Execution author: gy741 severity:...

Tenda AC15 AC1900 version 15.03.05.19 - Command Injection

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. id: CVE-2020-10987 info: name: Tenda AC15 AC1900 version 15.03.05.19 - Command Injection author: pussycat0x severity: critical...

D-Link DIR-823X set_prohibiting - Command Injection

D-Link DIR-823X 240126 and 240802 contain a command injection caused by sending a POST request to /goform/setprohibiting, letting an authorized attacker execute arbitrary commands remotely, exploit requires attacker to be authorized. id: CVE-2025-29635 info: name: D-Link DIR-823X setprohibiting -...

cve-2025-29384

Preuve de concept de l'exploit CVE-2025-29384 Vue d'ensemble Ce dépôt contient une preuve de concept PoC avancée pour CVE-2025-29384 , une vulnérabilité critique de débordement de tampon basé sur la pile découverte sur le routeur Tenda AC9 exécutant la version de firmware V15.03.05.14multi. Cette...