Research notes: vulnerability research and language models.https://stalactech.com/https://stalactech.com/blog/2026-10-08-hello-stalactech/https://stalactech.com/blog/2026-10-08-hello-stalactech/A new home for research notes, reverse engineering, and language-model experiments.Thu, 08 Oct 2026 00:00:00 GMTsite-metahttps://stalactech.com/blog/cve-2020-12126/https://stalactech.com/blog/cve-2020-12126/Multiple authentication bypass flaws in the /cgi-bin/ endpoint of the WAVLINK WN530H4 (firmware M30H4.V5030.190403) let an unauthenticated attacker leak router settings, change configuration variables, and cause denial of service.Fri, 02 Oct 2020 00:00:00 GMTvulnerability-researchhttps://stalactech.com/blog/cve-2020-12127/https://stalactech.com/blog/cve-2020-12127/The /cgi-bin/ExportAllSettings.sh endpoint of the WAVLINK WN530H4 (firmware M30H4.V5030.190403) disclosed router settings, including cleartext login details and DNS settings, without authentication.Fri, 02 Oct 2020 00:00:00 GMTvulnerability-researchhttps://stalactech.com/blog/cve-2020-12124/https://stalactech.com/blog/cve-2020-12124/The /cgi-bin/live_api.cgi endpoint of the WAVLINK WN530H4 (firmware M30H4.V5030.190403) allowed an unauthenticated remote attacker to execute arbitrary Linux commands as root via command-line injection.Fri, 02 Oct 2020 00:00:00 GMTvulnerability-researchhttps://stalactech.com/blog/cve-2020-12125/https://stalactech.com/blog/cve-2020-12125/The /cgi-bin/makeRequest.cgi endpoint of the WAVLINK WN530H4 (firmware M30H4.V5030.190403) had a remote buffer overflow that let an unauthenticated attacker execute arbitrary machine instructions as root.Fri, 02 Oct 2020 00:00:00 GMTvulnerability-researchhttps://stalactech.com/blog/cve-2020-12123/https://stalactech.com/blog/cve-2020-12123/The /cgi-bin/ endpoints of the WAVLINK WN530H4 (firmware M30H4.V5030.190403) lacked CSRF tokens, so an attacker could reach router functions through a user authenticated in the router portal.Fri, 02 Oct 2020 00:00:00 GMTvulnerability-researchhttps://stalactech.com/blog/cve-2020-8797/https://stalactech.com/blog/cve-2020-8797/On the Juplink RX4-1500 running firmware v1.0.3, an attacker on the local network who can authenticate as admin could gain root access to the Linux subsystem through an unsanitized exec call when the undocumented telnetd service is enabled.Thu, 23 Apr 2020 00:00:00 GMTvulnerability-researchhttps://stalactech.com/blog/cve-2020-8798/https://stalactech.com/blog/cve-2020-8798/The httpd service in Juplink RX4-1500 firmware v1.0.3 through v1.0.5 exposed an unauthenticated setup3.htm endpoint that let a local-network attacker change or access router settings.Thu, 23 Apr 2020 00:00:00 GMTvulnerability-research