Cao Ngoc Quy

4 exploits Active since Nov 2023
CVE-2023-38823 WRITEUP CRITICAL WORKING POC
Tenda AC6, AC9, AC18, AC19 Firmware - Remote Code Execution via formSetCfm Buffer Overflow
Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm function in bin/httpd.
CVSS 9.8
CVE-2024-33365 WRITEUP HIGH WORKING POC
Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn - Remote Code Execution via Virtual_Data_Check Function
Buffer Overflow vulnerability in Tenda AC10 v4 US_AC10V4.0si_V16.03.10.20_cn allows a remote attacker to execute arbitrary code via the Virtual_Data_Check function in the bin/httpd component.
CVSS 7.5
CVE-2025-67073 WRITEUP CRITICAL WORKING POC
Tenda AC10V4.0 V16.03.10.20 - Buffer Overflow in fromAdvSetMacMtuWan via serviceName Parameter
A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.
CVSS 9.8
CVE-2025-67074 WRITEUP MEDIUM WORKING POC
Tenda AC10V4.0 V16.03.10.20 - Buffer Overflow in fromAdvSetMacMtuWan via serverName Field
A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serverName`) to /goform/AdvSetMacMtuWan.
CVSS 6.5