Author
insomina
Security Researcher
Research by insomina
2 publications
Chaining a replayed login into full control of a home camera
Three flaws in a popular home camera combine into one path: replay a login, take an admin session, then inject commands into a diagnostic service. Here is how the chain works and how to shut it down.OS command executionCVE-2026-102369CVE-2026-15315CVE-2026-15316How an incomplete patch left a dashboard account takeover open
An earlier fix closed one open redirect, but a second redirect and a client-side path traversal rebuilt the same account takeover chain.Account takeoverCVE-2025-6023CVE-2025-6197
