Remenis/CVE-2025-63666

PoC

Tenda AC15 cookie exposure

view exploit source poc_in_githubauthor Remenispublished 2025-11-11catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-63666US	—	0.50% (42nd)	Exploit	2025-11-12
Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier.…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.