hyprblog

This post picks up where the last one left off and will use a couple of the bugs in the mt7622 driver as starting points to develop kernel exploit primitives on the Netgear WAX206.

It’s been over a year since my last post but I assure you it hasn’t been from a lack of bugs.

This post goes over 4 different exploits for CVE-2024-20017, a remotely exploitable buffer overflow vulnerability I discovered in a network daemon that’s shipped with the Mediatek MT7622 SDK and OpenWrt.

This is the second part of the two-part series covering a heap overflow I found in ReadyMedia MiniDLNA (CVE-2023-33476).

This post provides the details and a root cause analysis of a heap buffer overflow vulnerability I discovered in the HTTP chunk parsing code of MiniDLNA, affecting versions up to 1.3.2.

Having recently spent some time working on an exploit for an 0day I’d found on the RAX30, the recent release of a few ZDI advisories for this device caught my attention.

At the end of last year I stumbled on a crash in Xorg while playing with the GreatFET One but never really got around to follow up on it.

An unauthenticated command injection vulnerability in Netgear Orbi devices was reported to Netgear in December 2020 by ZDI.

The second part in this series going over my time hunting for bugs on the netgear orbi.

I’ve been hunting for bugs on the Netgear Orbi (RBR20) for about a year and half now.