news
Full Disclosure
October 20th, 2026 at 6:50 PM[0day-rubbish] TRENDnet TV-IP302PI firmware 1.02.38 authenticated NTP server-address OS command injection to root command execution via a shell-form system() call (7.2 High, PR:H)
Posted by disclosure via Fulldisclosure on Oct 20 0day Rubbish Research Team is publicly disclosing a vulnerability in TRENDnet TV-IP302PI firmware 1.02.38, the closed-source IP surveillance camera from TRENDnet (United States). The camera's application daemon is shipped at /hunt/hunt_server: an ARM 32-bit EABI5 version 5TE soft-float binary, dynamically linked against /lib/ld-linux.so.3, 4.5 MB and stripped. Its own string pool carries hunt_camera, HuntAudioConverter, HuntDataDirect and...
#ai
#research
Get stories like this every Monday
The week's most important AI news in one email. Free, unsubscribe anytime.
Score: 2.11
Engagement proxy: 0
Canonical link: https://seclists.org/fulldisclosure/2026/Oct/34