774 matches found
cve-2025-29384
Prueba de Concepto del Exploit CVE-2025-29384 Resumen Este repositorio contiene un exploit avanzado de prueba de concepto PoC para CVE-2025-29384 , una vulnerabilidad crítica de desbordamiento de búfer basado en pila descubierta en el router Tenda AC9 que ejecuta la versión de firmware...
CVE-2018-5767-AC9
Research and Author David Baker Article: Sometimes Exploits Need Patches Too! Working Through a Change of Address External link CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 root@kitploit: The following is an actualization of...
cve-2025-29384-poc
Exploit de Prueba de Concepto CVE-2025-29384 Descripción general Este repositorio contiene un exploit de prueba de concepto PoC avanzado para CVE-2025-29384 , una vulnerabilidad crítica de desbordamiento de búfer basado en pila descubierta en el router Tenda AC9 que ejecuta la versión de firmware...
CVE-2018-5767-AC9
CVE-2018-5767-AC9 An implementation of a proof-of-concept for CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 root@kitploit: The following is an actualization of CVE-2018-5767, a vulnerability which exploits an unguarded call to sscanf that occurs when parsing the 'Cookie' header for a...
CVE-2026-86300
A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...
CVE-2026-86300
An improper authentication flaw in the R7WebsSecurityHandler function of the Web Management component of Tenda AC9 firmware 15.03.05.14 allows a remote, unauthenticated attacker to bypass authentication with low complexity. The CVSS 3.1 base score is 7.3 (HIGH) with impacts of low confidentiality...
CVE-2026-86300 Tenda AC9 Web Management R7WebsSecurityHandler improper authentication
A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...
CVE-2026-86300 Tenda AC9 Web Management R7WebsSecurityHandler improper authentication
A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...
EUVD-2026-72351
A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...
PT-2026-86685
A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...
Exploit for Out-of-bounds Write in Tenda Ac9_Firmware
CVE-2025-29384 Proof-of-Concept Exploit Overview This repo...
CVE-2026-6016
A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. T...
The vulnerability of the formQuickIndex function in the Tenda AC9 router’s microprogramming software allows a hacker to induce a service failure.
The vulnerability of the formQuickIndex function in the Tenda AC9 router’s microprogramming software is related to buffer overflow in the stack when processing the PPPOEPassword parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the decodePwd function in the Tenda AC9 router’s microprogramming software allows a hacker to trigger a service failure.
The vulnerability of the decodePwd function in the Tenda AC9 router’s microprogramming system is related to buffer overflow in the stack during the processing of the WANS parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-6015
A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely...
Tenda AC9 stack buffer overflow vulnerability
The Tenda AC9 is a home-use dual-band gigabit wireless router launched by Tenda in 2016. The Tenda AC9 has a stack buffer overflow vulnerability, which stems from the decodePwd function in /goform/WizardHandle failing to handle the WANS parameter properly. Currently, no detailed details about the...
Tenda AC9 stack buffer overflow vulnerability
The Tenda AC9 is a home-use dual-band gigabit wireless router launched by Tenda in 2016. The Tenda AC9 has a stack buffer overflow vulnerability, which stems from the formQuickIndex function in the POST request handler failing to properly handle the PPPassword parameter. No detailed details about...
EUVD-2026-21311
A vulnerability has been found in Tenda AC9 15.03.02.13. Impacted is the function formQuickIndex of the file /goform/QuickIndex of the component POST Request Handler. Such manipulation of the argument PPPOEPassword leads to stack-based buffer overflow. It is possible to launch the attack remotely...
EUVD-2026-21312
A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. T...
CVE-2026-6016
A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. T...