CVE-2018-5767-AC9

Исследователь и автор Дэвид Бейкер Статья: Sometimes Exploits Need Patches Too! Working Through a Change of Address внешняя ссылка CVE-2018-5767-AC9 Реализация доказательства концепции для CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 Ниже представлена актуализация CVE-2018-5767 — уязвимост...

CVE-2018-5767-AC9

CVE-2018-5767-AC9 Реализация доказательства концепции для CVE-2018-5767 https://vulners.com/cve/CVE-2018-5767 Ниже приведена актуализация CVE-2018-5767 — уязвимости, которая использует незащищённый вызов sscanf при разборе заголовка 'Cookie' для пароля. Уязвимость была первоначально обнаружена и...

The vulnerability of the decodePwd function in the Tenda AC9 router’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the decodePwd function in the Tenda AC9 router’s microprogramming system is related to buffer overflow in the stack during the processing of the WANS parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formQuickIndex function in the Tenda AC9 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formQuickIndex function in the Tenda AC9 router’s microprogramming software is related to buffer overflow in the stack when processing the PPPOEPassword parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

EUVD-2019-14677

Malware in sbrugna...

EUVD-2019-14676

Malware in sbrugna...

EUVD-2025-12188

Malicious code in bioql PyPI...

EUVD-2022-33002

Malicious code in bioql PyPI...

The vulnerability of the formSetSambaConf() function in the Tenda AC9 router microprogramming software allows a attacker to execute arbitrary commands.

The vulnerability of the formSetSambaConf function in the Tenda AC9 router’s microprogramming software is related to the lack of measures taken to neutralize special elements during the processing of the usb.samba.guest.user parameter. Exploiting this vulnerability allows a remote attacker to...

The vulnerability of the HTTP POST Request Handler component of the formSetSafeWanWebMan() function in the Tenda AC9 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component of the formSetSafeWanWebMan function in the Tenda AC9 router’s microprogramming system is related to buffer overflow in the stack during the processing of the remoteIp parameter. Exploiting this vulnerability allows an attacker to...

The vulnerability of the HTTP POST Request Handler component of the fromadvsetlanip() function in the Tenda AC9 router’s microprogramming system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the HTTP POST Request Handler component of the fromadvsetlanip function in the Tenda AC9 router’s microprogramming system is related to buffer overflow in the stack during the processing of the lanMask parameter. Exploiting this vulnerability allows an attacker to compromise...

The vulnerability of the fromSysToolRestoreSet() function in the microprogramming software for Tenda AC9 allows a attacker to perform a CSRF attack.

The vulnerability of the fromSysToolRestoreSet function in the Tenda AC9 router’s microprogramming software is related to the manipulation of inter-site requests. Exploiting this vulnerability could allow a remote attacker to execute a CSRF attack...

Tenda AC9 注入漏洞

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability that stems from the parameter list in the file /goform/SetIPTVCfg failing to properly filter constructed command special characters, commands, and so on. No details of the...

The vulnerability of the formSetSambaConf() function in the Tenda AC9 router software allows a hacker to execute arbitrary code.

The vulnerability of the formSetSambaConf function in the Tenda AC9 router software is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-28560

There is a stack overflow vulnerability in the goform/fastsettingwifiset function in the httpd service of Tenda ac9 15.03.2.21cn router. An attacker can obtain a stable shell through a carefully constructed payload...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...

CVE-2025-45429

In the Tenda ac9 v1.0 router with firmware V15.03.05.14multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution...