cve-2025-29384

CVE-2025-29384 प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट अवलोकन इस रिपॉजिटरी में CVE-2025-29384 के लिए एक उन्नत प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट शामिल है, जो Tenda AC9 राउटर में फर्मवेयर संस्करण V15.03.05.14multi पर चलने वाली एक महत्वपूर्ण स्टैक-आधारित बफर ओवरफ्लो कमजोरी है। यह कमजोरी अप्रमाणित रिमोट हमलावर...

cve-2025-29384-poc

CVE-2025-29384 प्रूफ-ऑफ-कॉन्सेप्ट एक्सप्लॉइट अवलोकन इस रिपॉजिटरी में CVE-2025-29384 के लिए एक उन्नत प्रूफ-ऑफ-कॉन्सेप्ट PoC एक्सप्लॉइट शामिल है, जो Tenda AC9 राउटर में V15.03.05.14multi फर्मवेयर संस्करण पर चलने वाली एक महत्वपूर्ण स्टैक-आधारित बफर ओवरफ्लो कमजोरी है। यह कमजोरी अनप्रमाणित दूरस्थ...

CVE-2026-104611

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

EUVD-2026-91579

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104611 Tenda AC9 POST Request fast_setting_internet_set stack-based overflow

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104611 Tenda AC9 POST Request fast_setting_internet_set stack-based overflow

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-104611

A stack-based buffer overflow vulnerability exists in the Tenda AC9 (version 15.03.02.13). The flaw is located within an unknown function in the /goform/fast_setting_internet_set file of the POST Request Handler component. By manipulating the netWanType argument, an attacker can trigger the overf...

PT-2026-104300

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fast setting internet set of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be...

CVE-2026-104611: Stack-based Buffer Overflow

A vulnerability was detected in Tenda AC9 15.03.02.13. Affected is an unknown function of the file /goform/fastsettinginternetset of the component POST Request Handler. Performing a manipulation of the argument netWanType results in stack-based buffer overflow. The attack is possible to be carrie...

CVE-2026-86300

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86300 Tenda AC9 Web Management R7WebsSecurityHandler improper authentication

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86300

An improper authentication flaw in the R7WebsSecurityHandler function of the Web Management component of Tenda AC9 firmware 15.03.05.14 allows a remote, unauthenticated attacker to bypass authentication with low complexity. The CVSS 3.1 base score is 7.3 (HIGH) with impacts of low confidentiality...

EUVD-2026-72351

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86300 Tenda AC9 Web Management R7WebsSecurityHandler improper authentication

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

PT-2026-86685

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

CVE-2026-86300: Improper Authentication

A flaw has been found in Tenda AC9 15.03.05.14. This impacts the function R7WebsSecurityHandler of the component Web Management. This manipulation causes improper authentication. The attack may be initiated remotely. The exploit has been published and may be used...

Exploit for Out-of-bounds Write in Tenda Ac9_Firmware

CVE-2025-29384 Proof-of-Concept Exploit Overview This repo...

CVE-2026-6016

A vulnerability was found in Tenda AC9 15.03.02.13. The affected element is the function decodePwd of the file /goform/WizardHandle of the component POST Request Handler. Performing a manipulation of the argument WANS results in stack-based buffer overflow. The attack can be initiated remotely. T...

The vulnerability of the formQuickIndex function in the Tenda AC9 router’s microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formQuickIndex function in the Tenda AC9 router’s microprogramming software is related to buffer overflow in the stack when processing the PPPOEPassword parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the decodePwd function in the Tenda AC9 router’s microprogramming software allows a hacker to trigger a service failure.

The vulnerability of the decodePwd function in the Tenda AC9 router’s microprogramming system is related to buffer overflow in the stack during the processing of the WANS parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...