Security researching in the middle of the night. Focusing on ARM based embedded IoT
Joined August 2021
- Tweets49
- Following5
- Followers404
- Likes64
Pinned Tweet
Zyxel DX3301-T0/EX3301-T0 Router Post Auth Vulnerability for root shell.
Bootloader vulnerability for full debug commands access.
General Notes
#infosec #zyxel #iot
watchfulip.github.io
Watchful IP retweeted
⚡ New CVE Alert: CVE-2026-1460
📊 Severity: 7.2
🚨 Risk Level: High
🧩 Affects: Multiple / Unspecified Products
Reference: nvd.nist.gov/vuln/detail/CVE…
#CVE-2026-1460 #CVE #High #CyberSecurity #InfoSec
This vuln I reported has been disclosed by #zyxel today:
CVE-2026-1460 7.2
Post auth command injection for 45 platforms (4G LTE/5G NR CPE, DSL/Ethernet, CPE Fiber ONTs, Wireless Extenders)
Details and affected listed here:
zyxel.com/global/en/support/…
Watchful IP retweeted
TP-Link Tapo C200 security analysis and exploitation
evilsocket.net/2025/12/18/TP…
Research by @evilsocket
#infosec
Watchful IP retweeted
Zyxel has published 2 CVEs for some vulns I found :D
CVE-2025-13943: Authenticated command injection in log export CGI
CVE-2025-13942: Unauthenticated command injection in UPnP daemon
I will blog about this in the coming months. Meanwhile, exploits here: github.com/hacefresko/CVEs
Watchful IP retweeted
For the embedded security enthusiast,
here’s a list of resources of vuln researchers inspecting the TP-Link security camera(s):
>By @evilsocket : TP-Link Tapo C200: Hardcoded Keys, Buffer Overflows and Privacy in the Era of AI Assisted Reverse Engineering : evilsocket.net/2025/12/18/TP…
>By (me🤓): Exploiting n-day in Home Security Camera: pwner.gg/blog/2024-01-05-tp-…
>By @Watchful_IP : Link (Tapo) C210 cloud camera: bootloader vulnerability and firmware decryption : watchfulip.github.io/28-12-2…
>By @two06 : Hacking a Tapo TC60 Camera : medium.com/@two06/hacking-a-…
>By @drmnsamoliu : Tapo C200 IP camera research project : drmnsamoliu.github.io/index.…
Hi @ThunderySteak
Saw your writeup on unpacking TP-Link firmware - you might find this helpful if the firmware is encrypted.
Published a TP-Link firmware decryption tool
github.com/watchfulip/tp-lin…
based on my write up at watchfulip.github.io/28-12-2…
#tplink #infosec #Linux #embedded
Published a TP-Link firmware decryption tool
github.com/watchfulip/tp-lin…
based on my write up at watchfulip.github.io/28-12-2…
#tplink #infosec #Linux #embedded
New write up is now live:
TP-Link firmware decryption
(and messing around with a TP-Link C210 V2 cloud camera)
#tplink #infosec #Linux #embedded
watchfulip.github.io/28-12-2…
Got what I needed, but I should really learn to wait for the right tools to be delivered before insisting on moving on regardless.
These pins are 0.25mm and the wire is half of 1 pair from a solid core UTP network cable - and I had to cut an angle on it because it was too big!
I hope the more suitable probes I've ordered are delivered soon.
I had to make do with standard mutlimeter probes at the moment, which got me what I needed but was not fun with this 0.5mm pitch connector.
FFC Breakout board will also be handy.
Watchful IP retweeted
Making smart cybersecurity choices will help you more effectively protect the valuable assets you are already guarding with physical security. Read tips here: bit.ly/3osF9Z5 #cybersecurity
Direct links for firmware update files for affected devices:
Click the link to access the complete list of products with firmware updates, links to download, and FAQs.
Security notification: us.hikvision.com/en/support-…
Watchful IP retweeted
Hikvision issued the Security Notification regarding a critical Command Injection Vulnerability in the webserver of some Hikvision products. The updated firmware that fixes this problem is available on our website
👉 View the list of products affected >> lnkd.in/dw2rbQyB
Watchful IP retweeted
Unauthenticated Remote Code Execution (RCE) vulnerability in Hikvision IP cameras/NVR firmware ,Patch now (*CVE-2021-36260) : watchfulip.github.io/2021/09… credits @Watchful_IP
Watchful IP retweeted
Security Notification - Command Injection Vulnerability in Some Hikvision products
Read more: hikvision.com/en/support/cyb…
#cybersecurity #Hikvision