Vulnerability Research

Vulnerabilities I have found and reported myself in production code and real-world devices. Each post is my own advisory with a technical breakdown.

Conditional arbitrary file read in DIR-825ACG1

Analysis of a vulnerability I discovered in a router that was exploited using a double path traversal