Dasan GPON Devices - Remote Code Execution

Dasan GPON home routers are susceptible to command injection which can occur via the desthost parameter in a diagaction=ping request to a GponForm/diagForm URI. Because the router saves ping results in /tmp and transmits them to the user when the user revisits /diag.html, it's quite simple to...

GPON_RCE

GPONRCE GPONホームルーターにおけるリモートコード実行のエクスプロイト（CVE-2018-10562）Pythonで記述。...

CVE-2025-63729-Syrotech-SY-GPON-1110-

CVE-2025-63729의 PoC 발견자 : Yashodhan Vivek Mandke...

Pingpon-Exploit

ЭКСПЛОЙТ PINGPON Автор: @037 Pingpon — это инструмент, используемый для получения тысяч уязвимых домашних маршрутизаторов GPON с помощью Shodan.io, чтобы затем выполнять любые команды Linux, используя ошибку удаленного выполнения кода CVE-2018-10562. ОТКАЗ ОТ ОТВЕТСТВЕННОСТИ Я НЕ несу...

CVE-2025-63353

CVE-2025-63353 PoC - FiberHome HG6145F1 예측 가능한 기본 Wi-Fi PSK 교육 연구 툴킷 및 다국어 PoC - CVE-2025-63353 , FiberHome HG6145F1 RP4423 GPON ONT 장치에 영향을 미치는 치명적인 예측 가능 기본 PSK 취약점. 요약 영향을 받는 FiberHome HG6145F1 장치의 공장 기본 Wi-Fi 사전 공유 키PSK는 브로드캐스트 SSID의 결정적 함수입니다. 취약한 장치의 비콘 프레임을 관찰하는 공격자는 캡처된 핸드셰이크, 단어 목록, GPU ...

CVE-2018-10562

CVE-2018-10562 Эксплойт CVE-2018-10562 О RCE на домашних роутерах GPON CVE-2018-10561:Обход аутентификации CVE-2018-10562: Внедрение команд Необходимые зависимости requests urllib2 ssl re Скриншоты...

CVE-2025-63353

CVE-2025-63353: Предсказуемая уязвимость Wi-Fi пароля в устройствах FiberHome GPON ONT Ссылки Основано на исследовании Hanianis оригинальное раскрытие CVE на CVE-2025-63353 Благодарность исследователям безопасности, выявившим эту уязвимость. Отказ от ответственности Эта информация предоставлена...

GPON-LOADER

GPON-LOADER Эксплойт-загрузчик для удаленного выполнения кода с полезной нагрузкой на устройствах GPON Home Gateway CVE-2018-10562, написанный на Python. Зависимости requests Использование root@kitploit: python gpon-loader.py...

CVE-2026-5339

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

EUVD-2026-18342

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

CVE-2026-5339 Tenda G103 Setting gpon.lua action_set_net_settings command injection

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

CVE-2026-5339

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

CVE-2026-5339

CVE-2026-5339 affects Tenda G103 1.0.0.5. The vulnerability is in the Setting Handler’s gpon.lua, function action_set_net_settings, where manipulating authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriority enables command injection remotely. Public exploit av...

CVE-2026-5339 Tenda G103 Setting gpon.lua action_set_net_settings command injection

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function actionsetnetsettings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument authLoid/authLoidPassword/authPassword/authSerialNo/authType/oltType/usVlanId/usVlanPriori...

Tenda G103 命令注入漏洞

The Tenda G103 is a GPON fiber access device designed specifically for home and SOHO users by the Chinese company Tenda. Version 1.0.0.5 of the Tenda G103 contains a command injection vulnerability. This vulnerability stems from improper handling of parameters such as...

PT-2026-29748

A vulnerability was detected in Tenda G103 1.0.0.5. The impacted element is the function action set net settings of the file gpon.lua of the component Setting Handler. Performing a manipulation of the argument...

CVE-2026-2907

A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgponloid/fmgponloidpassword causes stack-based buffer overflow...

CVE-2026-2907

A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgponloid/fmgponloidpassword causes stack-based buffer overflow...

CVE-2026-2907

A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgponloid/fmgponloidpassword causes stack-based buffer overflow...

CVE-2026-2907

A weakness has been identified in Tenda HG9 300001138. Affected by this vulnerability is an unknown functionality of the file /boaform/formgponConf of the component GPON Configuration Endpoint. This manipulation of the argument fmgponloid/fmgponloidpassword causes stack-based buffer overflow...