ASUS RT-AC86U - Heap-based buffer overflow

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.twcert.org.tw/en/cp-139-5796-32617-2.html
• https://www.sentinelone.com/vulnerability-database/cve-2022-25596/
• https://nvd.nist.gov/vuln/detail/CVE-2022-25596
• https://app.opencve.io/cve/?product=rt-ac86u&vendor=asus
• https://cve.imfht.com/product/RT-AC86U?lang=en
• https://www.twcert.org.tw/en/cp-139-5796-32617-2.html

Related Vulnerabilities

• PoCCVE-2019-11043: PHP-FPM Path Info Buffer Underflow - Remote Code Execution
• 全程云 /OA/api/2.0/HR/EntryApply/GetBaseData SQL 注入漏洞
• ERPNext /api/method/erpnext.stock.doctype.material_request.material_request.get_material_requests_based_on_supplier SQL 注入漏洞（CVE-2025-52039）
• PoCCVE-2025-62613: VDO.Ninja - DOM-Based Cross-Site Scripting
• 易达科技-ECMS getProjectBaseDocData SQL注入漏洞
• PoC易达科技-ECMS getProjectBaseDocData 存在SQL注入漏洞
• PoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer Overflow
• PoCCVE-2024-22120: Zabbix Server - Time-Based Blind SQL injection
• PoCCVE-2025-22457: Ivanti Connect Secure - Stack-based Buffer Overflow
• PoCCVE-2025-8191: Swagger UI >=3.14.1 < 3.38.0 - DOM Based Cross-Site Scripting
• PoCCVE-2021-20038: SonicWall SMA100 Stack - Buffer Overflow/Remote Code Execution
• PoCCVE-2021-20167: Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun
• PoCCVE-2021-41349: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting