GPON_RCE

GPONRCE Exploit para ejecución remota de código en routers domésticos GPON CVE-2018-10562 escrito en Python...

CVE-2018-10562

CVE-2018-10562 CVE-2018-10562 exploit Acerca de RCE en routers domésticos GPON CVE-2018-10561:Bypass de autenticación CVE-2018-10562: Inyección de comandos Dependencias requeridas requests urllib2 ssl re Capturas de pantalla...

GPON-LOADER

GPON-LOADER Cargador de exploits para ejecución remota de código con payload en dispositivos GPON Home Gateway CVE-2018-10562 escrito en Python. Dependencias requests Uso root@kitploit: python gpon-loader.py...

CVE-2025-63353

CVE-2025-63353: Vulnerabilidad de Contraseña Wi-Fi Predecible en Dispositivos FiberHome GPON ONT Referencias Basado en la investigación de Hanianis divulgación original de CVE en CVE-2025-63353 Gracias a los investigadores de seguridad que identificaron esta vulnerabilidad. Aviso Legal Esta...

backdoor.mirai.helloworld

Al agregar una cadena después de '? image' en la URL del router Dasan GPON...

Pingpon-Exploit

PINGPON EXPLOIT Author: @037 Pingpon is a tool used to obtain thousands of vulnerable GPON home routers using Shodan.io to then execute any Linux command on using a remote code execution flaw CVE-2018-10562. DISCLAIMER I am NOT responsible for any damages caused or any crimes committed by using...

Dasan GPON Devices - Remote Code Execution

Dasan GPON home routers are susceptible to command injection which can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

CVE-2025-63353

CVE-2025-63353 PoC - FiberHome HG6145F1 Predictable Default Wi-Fi PSK Educational research toolkit and multi-language PoC for CVE-2025-63353 , a critical predictable-default-PSK vulnerability affecting FiberHome HG6145F1 RP4423 GPON ONT devices. Summary The factory default Wi-Fi pre-shared key on...

GPON

RCE on GPON home routers CVE-2018-10561 Vulnerability Many routers today use GPON internet, and a way to bypass all authentication on the devices CVE-2018-10561 was found by VPNMentor. With this authentication bypass, it's also possible to unveil another command injection vulnerability...

CVE-2025-63729-Syrotech-SY-GPON-1110-

El PoC para CVE-2025-63729 Descubridor: Yashodhan Vivek Mandke...

CVE-2024-57725

CVE-2024-57725: Vulnerabilidad de Manipulación del Enlace GPON en ciertos Routers Arcadyan Distribuidos por Orange y Jazztel Este repositorio documenta una vulnerabilidad no autenticada descubierta en routers LiveboxFibra Arcadyan distribuidos por Orange y Jazztel en España PRV3399BBLT. El proble...

CVE-2026-5339

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

EUVD-2026-18342

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

CVE-2026-5339 Tenda G103 Setting gpon.lua action_set_net_settings command injection

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

CVE-2026-5339

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

CVE-2026-5339

CVE-2026-5339 affects Tenda G103 1.0.0.5. The vulnerability is in the Setting Handler’s gpon.lua, function action_set_net_settings, where manipulating authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriority enables command injection remotely. Public exploit av...

CVE-2026-5339 Tenda G103 Setting gpon.lua action_set_net_settings command injection

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

Tenda G103 命令注入漏洞

The Tenda G103 is a GPON fiber access device designed specifically for home and SOHO users by the Chinese company Tenda. Version 1.0.0.5 of the Tenda G103 contains a command injection vulnerability. This vulnerability stems from improper handling of parameters such as...

PT-2026-29748

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action set net settings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument...

CVE-2026-2907

A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgponloid/fmgponloidpassword causes stack-based buffer overflow...