Interesting and detailed write up on finding and exploiting a vulnerability in the OpenWrt firmware upgrade feature.