Huawei Router Critical Vulnerability (CVE-2017-17309 / EDB-ID: 42634)
Discovered and reported a critical security vulnerability in Huawei HG255s routers.
Technician & Cybersecurity Researcher
"I have gained experience working at the world's largest energy and automation company and Europe's leading home appliances manufacturer. I identified security vulnerabilities in assets belonging to global giants and earned awards. Throughout these processes, I have developed strong collaboration skills by working with diverse teams."
Discovered and reported a critical security vulnerability in Huawei HG255s routers.
Discovered a root command injection (CWE-77, CVSS 8.8 High) in OpenWrt's luci-app-https-dns-proxy: shell metacharacters in the setInitAction ubus RPC 'name' parameter allow arbitrary command execution as root. Published on Exploit-DB (EDB-52521).
Discovered a deep link validation bypass (CWE-939) in the EcoOnline EHS Android app (com.airsweb.v10): crafted ehs-app:// links were rewritten to https:// and loaded into the app's WebView without its host allow-list check, rendering attacker-controlled content inside the trusted app (phishing). Vendor-acknowledged; fixed in version 0.2.500.
Received official reference postmail for vulnerability discovery.
Featured in national media for discovering security vulnerabilities.
Discovered and reported vulnerabilities in industry giants such as U.S. Dept Of Defense, General Motors, Uber, Yahoo, Yandex, Bosch, and many more.
Publication No: TR 2026005478 A2 · Asymmetric dual-channel output architecture + cloud–hardware bridge system
Application No: 2026/004623 · PCB: ESP32/RP2040, PE4259 switch, SPF5189Z LNA, 5-band SAW filter bank
Schneider Electric · Manisa
BEKO
Tor Demir Metal · Manisa
Termokar · Manisa
Balıkesir University, IT Department
HackerOne / Bugcrowd
Business Administration (Bachelor's Degree)
Occupational Health and Safety (Associate Degree)
Air Conditioning & Refrigeration Tech (Associate Degree)