blog

2 posts

Unlock SSH access on Bobcat Miner 300

// 11 min read // Research

Update: unfortunately, the bobcat company have patched the “exploit” described in this article. Also, they patched mine remotely and I have no more access. But before that I have done a copy of all the O.S. file of the device, so I was able to the try to crack the root password. …

> cat --more

CRLF Injection - Sercomm VD625 CVE-2021-27132

// 2 min read // CVE

An issue was discovered in Sercomm AGCOMBO VD625-Smart Modem - Firmware version: AGSOT_2.1.0, there is a CRLF Injection vulnerability via the header field “Content-Disposition”. The Sercomm AGCOMBO VD625-Smart Modem is a CPE (Customer-premises equipment) made by Sercomm for the …

> cat --more