Buffalo WZR-HP-G300NH2 suffers from a cross site request forgery vulnerability. The demonstration payload changes the administrative password.
356ff09e4efca2670f2e2f1a9ece0406305b5341ab44dff0237f4cf86e2c9419
This paper provides a walk-through on using binwalk and gzip to get to the disk image contained within a Sercomm IP Camera .bin firmware update.
a99d9652075f6bd2513e0818fbec064dcce83e25ac29649075f49fd45abebeb0