Posts tagged

IoT

Jun 13, 2026 HB

GL.iNet Beryl AX Triple RCE: CVE-2026-11450/11451/11452 — Unauthenticated Root on a Travel Router

Introduction

On June 7, 2026, three critical command injection vulnerabilities were published against the GL.iNet GL-MT3000 — better known as the Beryl AX, one of the most popular pocket-sized travel routers on the market. All three share a single devastating root cause: the rou…

Exploit Vulnerability Reverse-Engineering Hardware IoT Router Command-Injection

May 31, 2026 HB

lwIP SNMPv3 Stack Overflow: CVE-2026-8836 — Critical Unauthenticated RCE in a Billion Embedded Devices

lwIP SNMPv3 Stack Overflow: CVE-2026-8836 — One Packet to Own a Billion Embedded Devices

A commented-out bounds check in the world’s most widely deployed embedded TCP/IP stack lets any unauthenticated attacker on the network overflow a 12-byte stack buffer with a single ma…

Exploit Vulnerability Reverse-Engineering Hardware IoT Embedded-Systems SNMP

Tags

Account-Takeover android Android Android-Adb Android-apktool Android-Avd Android-Studio Anti-Bot Authentication Automotive Baseband C2 CAN-Bus Command-Injection Container-Escape Cross-Site-Scripting CWE-288 CWE-290 CWE-94 Data-Scraping Elixir Embedded-Systems Exploit Frida Geolocation GooglePlay Hardware HTTP2 Hugging-Face Identity-Confusion Information Security IoT JNI Linux Linux-Kernel LLaMA-Factory LLM MediaTek Memory Disclosure mitmproxy Mobile-Security Network-Analysis Networking OAuth OAuth2 OBD2 OIDC OpenID-Connect Out-of-Bounds Page-Cache Path-Traversal Penetration Testing Playwright Privilege-Escalation Python Race-Condition RCE Reverse Engineering Reverse-Engineering Router Samsung-Exynos Security Security-Research Session Hijacking SMS Snapchat SNMP SSL-Pinning STIG-Manager Supply-Chain Traefik Vulnerability Web Applications Web-Crawling Web-Security Wi-Fi Zero-Day