CVE-2025-7795

CVE-2025-7795 – Exploit di Buffer Overflow su Router Tenda Autore : Byte Reaper Telegram : @ByteReaper0 ID CVE : CVE-2025-7795 Tipo di vulnerabilità : Buffer Overflow Target : Router Tenda Exploit : Remoto, Non autenticato 📝 Descrizione Esiste una vulnerabilità di buffer overflow in alcuni modell...

CVE-2022-30023

CVE-2022-30023 Iniezione di comandi autenticata sul router Tenda HG9 Utilizzo root@kitploit: git clone https://github.com/Haniwa0x01/CVE-2022-30023 cd CVE-2022-30023 python exploit.py -u http://target -U "user" -P "password" Esempio root@kitploit: pc@pc-note:/CVE-2022-30023/$ python3 exploit.py -...

CVE-2022-30040

Tenda AX1803 v1.0.0.12890 Vulnerabilità di negazione del servizio Panoramica Informazioni sul sito web del produttore: https://www.tenda.com.cn/profile/contact.html Indirizzo di download del firmware: https://www.tenda.com.cn/download/default.html Descrizione della vulnerabilità La vulnerabilità...

cve-2025-29384

CVE-2025-29384 Proof-of-Concept-Exploit Überblick Dieses Repository enthält einen erweiterten Proof-of-Concept-Exploit PoC für CVE-2025-29384 , eine kritische Stack-basierte Pufferüberlauf -Schwachstelle, die im Tenda AC9 -Router mit der Firmware-Version V15.03.05.14multi entdeckt wurde. Diese...

CVE-2026-11499

🚨 CVE-2026-11499 Stack-Based Buffer Overflow nei Router Tenda HG7 / HG9 / HG10 📖 Panoramica CVE-2026-11499 è una vulnerabilità di stack-based buffer overflow segnalata che colpisce diversi modelli di router Tenda , tra cui: HG7 HG9 HG10 Un exploit riuscito potrebbe consentire a un attaccante di...

CVE-2025-63666

CVE-2025-63666 — Tenda AC15 Riepilogo Il firmware Tenda AC15 V15.03.05.18multi rilascia un cookie di autenticazione nella forma password= e lo restituisce senza i flag HttpOnly, Secure o SameSite, esponendo l'hash della password al client. Il suffisso a bassa entropia funge da identificatore di...

TendaSpill

TendaSpill Uno strumento di exploit per estrarre password utilizzando CVE-2015-5995. CVE-2015-5995 I dispositivi Mediabridge Medialink MWN-WAPR300N con firmware 5.07.50 e Tenda N3 Wireless N150 consentono a attaccanti remoti di ottenere accesso amministrativo tramite una certa sottostringa 'admin...

cve-2022-27255

CVE-2022-27255 - Realtek eCos SDK SIP ALG 버퍼 오버플로우 이 저장소는 DEFCON30에서 발표된 "Exploring the hidden attack surface of OEM IoT devices: pwning thousands of routers with a vulnerability in Realtek’s SDK for eCos OS." 세션의 자료를 포함하고 있습니다. 이 저장소의 내용은 다음과 같습니다: analysis: CVE-2022-27255 존재 여부를 탐지하는 자동화된 펌웨어 분...

tenda-ac8v4-rop

Tenda-Ac8v4-PoC Tenda Ac8v4 Overflow basato su stack per esecuzione di codice remoto tramite dirottamento del flusso di esecuzione e sfruttamento della manipolazione di registri multipli; le CVE sono: CVE-2023-33675 CVE-2023-33673 CVE-2023-33672 CVE-2023-33671 CVE-2023-33670 CVE-2023-33669 Marcat...

CVE-2023-33669

CVE-2023-33669 Exploit Exploit für eine Stapelüberlauf-Schwachstelle im Tenda AC8 Router, der gezielt auf die Firmware-Version USAC8V4.0siV16.03.34.06 abzielt. Offizielle Produktseite. Emulation Du kannst die Datei 'prepare.sh' in das Root-Verzeichnis der Firmware legen und sie ausführen. Außerde...

CVE-2024-24488

CVE-2024-24488 Un problema in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 consente a un attaccante locale di ottenere informazioni sensibili tramite il componente password. Versioni Testate CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: Archiviazione in chiaro in un file o su disco...

CVE-2023-26976_tenda_AC6_stack_overflow

Questo repository non contiene un README...

CVE-2020-35391-POC

Benvenuto in CVE-2020-35391-POC 👋 Tenda N300 Bypass dell'autenticazione tramite header di richiesta HTTP malformato - POC in Python I dispositivi Tenda N300 F3 12.01.01.48 consentono ad attaccanti remoti di ottenere informazioni sensibili tra cui possibilmente una riga httppasswd tramite una...

Tenda 11N - Authentication Bypass

Tenda 11N with firmware version V5.07.33cn contains an authentication bypass vulnerability. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. id: CVE-2022-42233 info: name: Tenda 11N -...

Tenda Router AC11 - Remote Command Injection

Tenda Router AC11 is susceptible to remote command injection vulnerabilities in the web-based management interface that could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. id: CVE-2021-31755 info: name: Tenda Router AC11 - Remote Comman...

Tenda AC1200 V-W15Ev2 - Authentication Bypass

The Tenda AC1200 V-W15Ev2 router is affected by improper authorization/improper session management. The software does not perform or incorrectly perform an authorization check when a user attempts to access a resource or perform an action. This allows the router's login page to be bypassed. The...

Tenda AC15 AC1900 version 15.03.05.19 - Command Injection

The goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via the deviceName POST parameter. id: CVE-2020-10987 info: name: Tenda AC15 AC1900 version 15.03.05.19 - Command Injection author: pussycat0x severity: critical...

CVE-2025-9090

CVE-2025-9090 लेखक: Byte Reaper विवरण यह एक्सप्लॉइट CVE-2025-9090 को लक्षित करता है, जो Tenda AC20 v16.03.08.12 राउटर में एक कमांड इंजेक्शन भेद्यता है। दोष एंडपॉइंट /goform/telnet में है, जिसे दूरस्थ रूप से ट्रिगर किया जा सकता है। जब एक्सेस किया जाता है, तो यह डिवाइस पर Telnet सेवा शुरू करता है,...

go-without-bounds-cve-2026-67822-stack-overflow-in-tenda-w6-s-wifissidset

CVE-2026-67822 — Tenda W6-S wifiSSIDset-Stack-Pufferüberlauf PoC Begleit-PoC zum Hunt-Benito-Artikel "GO Without Bounds: CVE-2026-67822 — Stack-Pufferüberlauf imwifiSSIDset-Formularhandler des Tenda W6-S". CVE-2026-67822 CVSS 9.8 Kritisch, CWE-121 ist ein stack-basierter Pufferüberlauf in...

cve-2025-29384-poc

CVE-2025-29384 प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट अवलोकन इस रिपॉजिटरी में CVE-2025-29384 के लिए एक उन्नत प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट शामिल है, जो Tenda AC9 राउटर में V15.03.05.14multi फर्मवेयर संस्करण पर चलने वाली एक महत्वपूर्ण स्टैक-आधारित बफर ओवरफ्लो कमजोरी है। यह कमजोरी अनप्रमाणित दूरस्थ...