Record · corpus.blog/posts/01a087ab-1382-710b-9c09-a5853112a20e

Rooting Home Assistant through MeshCore: XSS attacks with a LoRa node name

mxsasha.eu · published 3 June 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at mxsasha.eu Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 29
Words captured: 2,686

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/jpettitt/meshcore-card

github.com

https://github.com/d3sbo/MeshCore-Home-Assistant-Panel-v2

github.com

https://github.com/d3sbo/MeshCore-Home-Assistant-Panel-v2-HACS

github.com

https://github.com/Kpa-clawbot/CoreScope/

github.com

https://github.com/jpettitt/meshcore-card/security/advisories/GHSA-5vrg-xpcj-xppc

github.com

https://www.cve.org/CVERecord?id=CVE-2026-45323

cve.org

https://meshcore.dev/

meshcore.dev

Root from the parking lot: OpenWrt XSS through SSID scanning (CVE-2026-32721) Read at the source ↗

mxsasha.eu

https://portswigger.net/web-security/dom-based/dom-clobbering

portswigger.net

https://developer.mozilla.org/en-US/docs/Web/API/Web_components/Using_shadow_DOM

developer.mozilla.org

https://developer.mozilla.org/en-US/docs/Web/HTML/Element/iframe

developer.mozilla.org

https://blog.trailofbits.com/2019/07/19/understanding-docker-container-escapes/

blog.trailofbits.com

https://github.blog/security/vulnerability-research/securing-our-home-labs-home-assistant-code-review/

github.blog

https://www.elttam.com/blog/pwnassistant

elttam.com

https://www.home-assistant.io/security/

home-assistant.io

https://github.com/home-assistant/architecture/discussions/1374

github.com

https://community.home-assistant.io/t/open-letter-for-improving-home-assistants-authentication-system-oidc-sso/494223

community.home-assistant.io

Taking down a European network with a TLS certificate: my RIPE NCC RPKI exploit chain Read at the source ↗

mxsasha.eu

https://github.com/d3sbo/MeshCore-Home-Assistant-Panel-v2/issues/2

github.com

https://github.com/Kpa-clawbot/CoreScope

github.com

https://github.com/Kpa-clawbot/CoreScope/blob/b559f310f392551adda0a662200f29e3525784a5/public/map.js

github.com

https://github.com/Kpa-clawbot/CoreScope/issues/48

github.com

https://github.com/Kpa-clawbot/CoreScope/releases/tag/v3.8.3

github.com

https://github.com/jpettitt/meshcore-card/commit/23d01e4165dfbf92e31ed65e1a17d40314e2a1fc

github.com

https://github.com/d3sbo/MeshCore-Home-Assistant-Panel-v2-HACS/issues/1

github.com

https://github.com/Kpa-clawbot/CoreScope/issues/1535

github.com

RIPE NCC session fixation: poaching logins with an Atlas probe Read at the source ↗

mxsasha.eu

Root from the parking lot: OpenWrt XSS through SSID scanning (CVE-2026-32721) Read at the source ↗

mxsasha.eu

Taking down a European network with a TLS certificate: my RIPE NCC RPKI exploit chain Read at the source ↗

mxsasha.eu