tangrs

In the previous post, I described how we can exploit CVE-2026-1668 to gain arbitrary code execution.

In the previous post, I described the details of CVE-2026-1668, and how we’re able to obtain an out-of-bounds write by setting a specific value in the Content-Length header.

In late 2025, I discovered a vulnerability in some TP-Link Smart Switches that could be exploited to obtain unauthenticated remote code execution as root (CVE-2026-1668).

TrueNAS’s snapshot replication functionality is useful for implementing off-site backups.

In a previous post, I described the firmware encryption for some TP-Link Smart Switches.

In my previous post, I wrote about how I obtained root on the stock firmware of my switch to try to figure out how the stock firmware was implementing per-port power limits.

Background I recently bought a cheap TP-Link switch in hopes that it would be able to run OpenWRT.

I recently acquired a TL-SG2008P and was hoping to do some research on the stock firmware for various reasons (mostly curiosity).

With the warmer months coming up, I started to worry about the low fixed speed of the built-in fan of my Asustor Lockerstor Gen2 NAS running TrueNAS.

I recently bought a Asustor Lockerstor 4 Gen2 NAS to run TrueNAS on.