Cybertuz

Privacy & Cookie Policy

Sun, 27 Sep 2026 00:00:00 +0000

Last updated: 27 September 2026

This page explains what personal data this blog processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and the Italian privacy law (D.Lgs. 196/2003).

Data controller #

The data controller is the author of this blog, Cybertuz. Contact: adrian@cybertuz.com.

About

Sun, 03 Dec 2023 16:56:02 +0000

Welcome to Cybertuz blog! #

Hi! I’m Cybertuz, a passionate cybersecurity expert dedicated to uncovering and understanding the complexities of technology and digital security. Through this blog, I share my latest findings on new vulnerabilities, insightful research, and the ever-evolving landscape of cybersecurity.

Contact

Sun, 03 Dec 2023 16:56:02 +0000

console
$ echo $CONTACT
adrian@cybertuz.com

Want to report something, discuss a vulnerability or collaborate on some research? Write me at adrian@cybertuz.com: I’ll try to reply as soon as possible.

Unlock SSH access on Bobcat Miner 300

Sat, 04 Jun 2022 16:18:00 +0000

Introduction #

Update: unfortunately, the bobcat company have patched the “exploit” described in this article. Also, they patched mine remotely and I have no more access. But before that I have done a copy of all the O.S. file of the device, so I was able to the try to crack the root password. I have tried whit haschat whit a big Wordlist, I did not succeed, probably it is a Chinese word.. I will make some more study on this device, and a new blog post in the future, or maybe I will just publicly release all the file that I extracted from the device.

CRLF Injection - Sercomm VD625 CVE-2021-27132

Thu, 25 Feb 2021 16:09:00 +0000

An issue was discovered in Sercomm AGCOMBO VD625-Smart Modem - Firmware version: AGSOT_2.1.0, there is a CRLF Injection vulnerability via the header field “Content-Disposition”.

The Sercomm AGCOMBO VD625-Smart Modem is a CPE (Customer-premises equipment) made by Sercomm for the various ISPs (Internet service providers). The device in which the vulnerability was found is the one for TIM (Telecom Italia).