References https://blog.csdn.net/weixin_65311462/article/details/145631277 https://blog.csdn.net/zkaqlaoniao/article/details/134800676 https://github.com/gobysec/GobyVuls/tree/master/Tenda/uploadWewifiPic%20RCE https://blog.csdn.net/cz010822/article/details/136233067 https://www.sxcast.edu.cn/uploadfile/ueditor/file/202510/1761869308d5a4ea.pdf
Related Vulnerabilities金和OA AttendWorkAttendance.aspx SQL注入漏洞Tenda CH22 安全漏洞Tenda WH450 安全漏洞Tenda WH450栈溢出漏洞(CVE-2025-15178)Tenda WH450 缓冲区溢出漏洞(CVE-2025-15164)Tenda CH22 路径遍历漏洞(CVE-2025-15076)(CVE-2025-15008)Tenda WH450 1.0.0.18 HTTP请求处理组件堆栈缓冲区溢出漏洞(CVE-2025-15006)Tenda WH450 1.0.0.18 HTTP请求处理器栈缓冲区溢出漏洞(CVE-2025-11117)Tenda CH22 1.0.0.1缓冲区溢出漏洞(CVE-2025-9023)Tenda AC7和AC18缓冲区溢出漏洞PoCCVE-2020-10987: Tenda AC15 AC1900 version 15.03.05.19 - Command InjectionPoCCVE-2021-31755: Tenda Router AC11 - Remote Command InjectionPoCCVE-2022-40843: Tenda AC1200 V-W15Ev2 - Authentication Bypass