The Curious Engineer

All blogs / Security

IT Security Research by Pierre

pierrekim.github.io/blog

SecurityReverse engineeringEmbedded / microcontrollersNetworking

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
50 from 7 Apr 2015 to 20 Nov 2025
Posting
now and then (3 in the last year)
Kind
personal blog
Feed
https://pierrekim.github.io/blog/feed.xml

2025 5

  1. 8 vulnerabilities in AudioCodes Fax/IVR Appliance
  2. 2 vulnerabilities in Egovframe
  3. 83 vulnerabilities in Vasion Print / PrinterLogic
  4. 10 vulnerabilities in Brocade Fibre Channel switches
  5. 3 vulnerabilities in Palo Alto Deep Packet Inspection mechanism

2024 5

  1. 32 vulnerabilities in IBM Security Verify Access
  2. 4 vulnerabilities in ibmsecurity
  3. 17 vulnerabilities in Sharp Multi-Function Printers
  4. 40 vulnerabilities in Toshiba Multi-Function Printers
  5. 18 vulnerabilities in Brocade SANnav

2022 1

  1. 2-byte DoS in freebsd-telnetd / netbsd-telnetd / netkit-telnetd / inetutils-telnetd / telnetd in Kerberos Version 5 Applications - Binary Golf Grand Prix 3 - CVE-2022-39028

2021 2

  1. Multiple vulnerabilities in Dell OpenManage Enterprise
  2. Multiple vulnerabilities found in FiberHome HG6245D routers

2020 2

  1. Multiple vulnerabilities found in CDATA OLTs
  2. Multiple vulnerabilities found in Zyxel CNM SecuManager

2017 7

  1. Update - Pwning the Dlink 850L routers and abusing the MyDlink Cloud protocol
  2. Pwning the Dlink 850L routers and abusing the MyDlink Cloud protocol
  3. Zer0con slides - Owning embedded devices and network protocols
  4. Multiple vulnerabilities found in Wireless IP Camera (P2P) WIFICAM cameras and vulnerabilities in custom http server
  5. TP-Link C2 and C20i vulnerable to command injection (authenticated root RCE), DoS, improper firewall rules
  6. CVE-2017-5850 - Remote DoS against OpenBSD http server (up to 6.0)
  7. Update - Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...) - Analysis of the corrected firmware

2016 7

  1. GPON FTTH networks (in)security
  2. Studying the Internet Censorship in South Korea
  3. Multiple vulnerabilities found in the Dlink DWR-932B (backdoor, backdoor accounts, weak WPS, RCE ...)
  4. Multiple vulnerabilities found in Quanta LTE routers (backdoor, backdoor accounts, RCE, weak WPS ...)
  5. Why I stopped using StartSSL (Hint it involves a Chinese company)
  6. CVE-2015-5677 - FreeBSD bsnmpd information disclosure
  7. CVE-2015-7944, CVE-2015-7945 - Ganeti Security Advisory (DoS, Unauthenticated Info Leak)

2015 21

  1. Huawei Wimax routers vulnerable to multiple threats
  2. CVE-2015-8100 - OpenBSD package 'net-snmp' information disclosure
  3. A comprehensive study of Huawei 3G routers - XSS, CSRF, DoS, unauthenticated firmware update, RCE
  4. TOTOLINK Update - How to NOT handle security issues
  5. Watching SBS and KBS in a remote country
  6. updated - 172 ipTIME router models vulnerable to an unauthenticated RCE by sending a crafted DHCP request
  7. Why Full Disclosure is the solution ? An example with RIPE
  8. Using Linux (Debian 8) on a LG 13ZD950
  9. 4 TOTOLINK router models vulnerable to CSRF and XSS attacks
  10. Backdoor credentials found in 4 TOTOLINK router models
  11. Backdoor and RCE found in 8 TOTOLINK router models
  12. 15 TOTOLINK router models vulnerable to multiple RCEs
  13. 127 ipTIME router models vulnerable to an unauthenticated RCE by sending a crafted DHCP request
  14. ipTIME n104r3 vulnerable to CSRF and XSS attacks
  15. Exploit Code for ipTIME firmwares < 9.58 RCE with root privileges against 127 router models
  16. Small monitoring system using Freemobile
  17. Recovering Windows on a "Windows-free" LG laptop
  18. ERRATA - 127 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges
  19. 112 ipTIME Routers/WiFi APs/Modems/Firewalls models vulnerable with RCE with root privileges
  20. CVE-2015-1415
  21. Annyeong haseyo!