Loading...

Research

CVE work, vulnerability research, and security-focused writeups across web, browser, and device security.

Vulnerability disclosures

Updated July 2026

Findings: 12
Reserved: 12
Disclosed: 0
Max CVSS: 8.8

Fullhan Microelectronics AJL30PG0803 IP Camera

No vendor response

6 findings

Unauthenticated blind OS command injection via the custom SYSTEM protocol

CVSS 8.8Reserved

Unauthenticated read/write access to PSIA API endpoints

CVSS 8.8Reserved

Unauthenticated live camera snapshots on TCP port 6688

CVSS 6.5Reserved

BusyBox Telnet enabled by default with root shell exposure

CVSS 8.8Reserved

Unauthenticated disclosure of plaintext device credentials

CVSS 6.5Reserved

Plaintext storage of Wi-Fi credentials in ifcfg.wlan0

CVSS 7.4Reserved

Camaleon CMS

Fixed and credited

6 findings

Broken Access Control in Plugin Administration Routes

CVSS 6.3Reserved

Stored XSS via Draft Post Title

CVSS 8.7Reserved

Authenticated RCE via instance_eval in Select Eval Custom Fields

CVSS 7.2Reserved

Stored XSS via Contact Form previous_html Rendering

CVSS 8.7Reserved

Authenticated SQL Injection via Slug Translations

CVSS 6.5Reserved

Authenticated SSTI leading to RCE via render inline in test_email

CVSS 6.6Reserved

Research writeups

10/03/26

Breaking Into My Own Camera

Six assigned CVEs covering unauthenticated PSIA access, plaintext credential exposure, exposed snapshots, blind command execution, default Telnet, and plaintext Wi-Fi credentials.

CVEIoT SecurityMissing Authentication

20/03/26

Camaleon CMS Vulnerability Research

Security review of Camaleon CMS 2.9.1 covering broken access control, stored XSS, authenticated RCE, SQL injection, and SSTI-to-RCE findings.

CVEBroken Access ControlStored XSS

02/12/25

Kosovo Government Domain Checker

Browser extension research and tooling for identifying official Kosovo government domains and reducing phishing risk.

PhishingDomain VerificationBrowser Extension

17/05/26

Next.js App Router: Path Normalization Middleware Bypass

Not public yet, to be disclosed.

Web SecurityNext.jsInformation Disclosure