KD8CEC Amateur Radio

TL;DR: Open WebUI builds below v0.1.124 carry CVE-2026-44566 ( GHSA-9pgh-j74g-qj6m ) — an arbitrary file upload / path traversal weakness. In a controlled lab demo against a disposable v0.1.120 container, a traversal write reached outside the uploads directory and overwrote /etc/passwd inside the Docker container, injecting a visible hacked account marker. This is not a reverse shell — it is a file-write-to-anywhere impact. Patch now — upgrade to a fixed release, rebuild images, and lock down upload endpoints. ⚠ Security notice: This post is for defensive awareness only . The demo was run in an isolated lab against a disposable target I own and control. This article contains no payloads, no exploit code, and no tooling for download , and no step-by-step reproduction. Do not test systems you do not own or lack explicit permission to assess. Demo intro — Open WebUI CVE-2026-44566 lab thumbnail Watch the lab demo I recorded a short proof-of-concept walkthrough (English ...

TL;DR: Node2Shell ( CVE-2026-111497 ) is a critical unauthenticated remote code execution weakness in the Express Brotli handling path. In a controlled lab demo, the impact progresses from a simple probe all the way to an interactive reverse shell in the application process context. Patch now — upgrade the Node.js / Express stack, rebuild images, and restart every worker so no vulnerable process keeps serving traffic. ⚠ Security notice: This post is for defensive awareness only . All demos were run in an isolated lab against a disposable target I own and control. This article contains no payloads, no exploit code, and no tooling for download . Do not probe systems you do not own or lack explicit permission to test. Watch the lab demo I recorded a short proof-of-concept walkthrough (English captions, role cards for Probe → RCE → Reverse Shell → Post-exploit, lab-only): ▶ Node2Shell (CVE-2026-111497): Express Brotli RCE to a Reverse Shell https://www.youtube.com/watch?v=...

TL;DR: PHP2Shell ( CVE-2026-109618 , CVE-2026-109619 ) is a pair of critical remote code execution flaws in the PHP core (CVSS 9.2). In lab testing, the issue is not a narrow “one-off bug” — under the right conditions it can be driven from a simple code-execution check all the way to a reverse shell. Patch now. There is no complete mitigation other than updating. Watch on YouTube — PHP2Shell RCE lab demo ⚠ Security notice: This post is for defensive awareness only. All demos were run in an isolated lab against a local containerized target. Do not probe systems you do not own. Watch the lab demo I recorded a short proof-of-concept walkthrough (English captions, lab-only): ▶ PHP2Shell RCE PoC — From Fatal Error to Reverse Shell https://www.youtube.com/watch?v=1D9i6-tUxaI Demo intro: patch immediately · isolated lab only What is PHP2Shell? On 21 October 2026 , the PHP project published a security advisory for two...

NeuroSDR User Manual (1) Main Window & Everyday RX · (2) NeuroCaption & AF Plugins · (3) Sub VFO, Satellite, Digital Voice Also: NeuroSDR · What it is · Download & Install NeuroSDR user manual (3) — Sub VFO, satellite, digital voice, Smart Record, web remote Advanced workflows. The Sub VFO / multi-FT8 story assumes hardware with enough instantaneous bandwidth. Author: KD8CEC . 1. Sub VFOs on wide hardware (founding goal) A Sub VFO is an independent virtual receiver inside the RF capture window. On an RSP (or other wide source), you can: Listen to shortwave or CW on MAIN Run FT8 plugins on SUB1 / SUB2 / SUB3 at 14.074, 7.074, 7.040 MHz, … See decoded callsigns on the main waterfall when MAIN WF overlay is enabled If a Sub VFO leaves the capture, the UI shows OUT OF RANGE — raise sample rate / recenter, or accept that the decoder pauses. YouTube: RSP1 bandwidth + Sub VFOs + multi FT8 — full episode YouTube: Create Sub VFOs...

NeuroCaption & AF plugin overview (KD8CEC) NeuroSDR User Manual (1) Main Window & Everyday RX · (2) NeuroCaption & AF Plugins · (3) Sub VFO, Satellite, Digital Voice Also: NeuroSDR · What it is · Download & Install NeuroSDR user manual (2) — NeuroCaption and AF plugins Plugins attach to demodulated audio (or IQ) from your receiver. They are most powerful on local hardware with a stable sample stream; they also work on Virtual Kiwi/WebSDR when you use that secondary path. Author: KD8CEC . 1. Mental model SET → AF Plugins → add a row → choose type → assign VFO ( main or a Sub VFO) → APPLY. Each SCENE owns its plugin instance list. Decoder UIs appear as tabs on the right (FT8, CW, Caption, …). YouTube: AF plugins & captions intro — 03:36 2. NeuroCaption engines Engine Use when Notes ONNX / Sherpa Whisper (Tiny/Base/Small) Offline PC Download INT8 model files; Base/Small cost more CPU than Tiny Groq API Fast cloud STT ...

NeuroSDR User Manual (1) Main Window & Everyday RX · (2) NeuroCaption & AF Plugins · (3) Sub VFO, Satellite, Digital Voice Also: NeuroSDR · What it is · Download & Install NeuroSDR user manual (1) — Main window and everyday RX Everyday operation with a local SDR (or a remote source if that is all you have). Author: KD8CEC . Main window — RX CONTROL, AF plugin tabs, RF spectrum/waterfall. YouTube: Device selection & display — 00:11 YouTube: Tuning shortcuts — 00:40 1. Choose SOURCE, then RX START In SOURCE , pick your hardware (SDRplay, RTL-SDR, HackRF, Airspy, …). Virtual Kiwi/WebSDR/OpenWebRX only if you are using the secondary Internet path. Press RX START . The button becomes RX STOP while running. Watch RF/AF meters and the status line for drops / underruns on hardware. 2. RX CONTROL Frequency digits — Click a digit, wheel to change that decade; or enter a frequency and commit. RF GAIN — Hardware gain where ...

NeuroSDR User Manual (1) Main Window & Everyday RX · (2) NeuroCaption & AF Plugins · (3) Sub VFO, Satellite, Digital Voice Also: NeuroSDR · What it is · Download & Install NeuroSDR — Download and install for real SDR hardware This guide is for people who download a release and run NeuroSDR on Windows with a dongle or RSP. Author: KD8CEC . Repo install text (English + KO/JA/ZH): INSTALL.md . 1. Get the software Open GitHub Releases (not the green Code zip on the repo home page). Download the newest Windows x64 asset (example: NeuroSDR-v0.2-win-x64.zip ). Extract everything to a writable folder (e.g. C:\NeuroSDR ). Run NeuroSDR.exe . Old Zadig builds break RTL-SDR on modern Windows. Always use the latest Zadig when you need WinUSB. 2. What the zip already contains NeuroSDR.exe and supporting runtime files for that package Bundled native helpers for common USB SDRs (RTL-SDR, HackRF, Airspy, …) under paths such as native\ Built-in ...

NeuroSDR — What it is (hardware SDR first, AI where it helps) Hello. This is KD8CEC . Start here Download & Install → User Manual (1) → All NeuroSDR posts NeuroSDR is a Windows software-defined radio receiver . The primary job is simple to state and hard to do well: take IQ from a real SDR, show a usable spectrum/waterfall, demodulate cleanly, and keep decoding plugins running while you still listen. I publish release zips so most people never compile anything: NeuroSDR Releases . NeuroSDR main window — local or discovered hardware appears under SOURCE; RX START runs the receiver. How to read this series: NeuroSDR is a hardware SDR application . SDRplay, RTL-SDR, HackRF, Airspy / Airspy HF+, SoapySDR devices, and rtl_tcp are the main path. Virtual WebSDR / KiwiSDR / OpenWebRX sources exist as a convenience when you have no dongle or want a public remote site — they are secondary , not the product definition. 1. Why I built it this way There are alre...

C-Board (DSP) for UV-K5 — firmware package v0.32 UV-K5 CEC / C-Board C-Board Firmware v0.32 · CEC Source Open · C-Board Hardware Label: UV-K5 · Latest stable radio firmware noted in older posts → see series history under Batch D C-Board firmware downloads are now available on GitHub. C-Board is the external DSP board I built for UV-K5 (and compatible radios) to extend digital features such as FT8 receive, APRS receive/decode, GPS-assisted functions, and related experiments. Hardware introduction (previous post): C-BOARD (DSP-Board) for UV-K5 Repository github.com/phdlee/cboard-uvk5 Release package: v0.32 What is in v0.32 cboard_v032.uf2 — C-Board firmware (RP2040) cec0.3P.packed.bin — companion UV-K5 / UV-5R Plus firmware cboard_v0.32.zip — packaged set + original notes Download v0.32 How to flash (short) Download cboard_v0.32.zip fr...

The CEC UV-K5 firmware source is now available on GitHub. Also available Need the companion C-Board DSP binaries? → C-Board Firmware Download (v0.32) When this project began, the plan was simple: ship binaries while the firmware was still moving quickly, then open the full tree at version 1.0. That milestone never quite arrived on schedule — so rather than keep waiting for a "perfect" release, I am opening the source now. A short note on the delay School lectures and other projects kept me busy for a long time. I also had many earlier projects still in progress — including other open-source work — so picking this firmware tree back up was not easy. With recent AI tooling available, I finally used that help to organize and upload the complete source. Repository github.com/phdlee/uvk5cec Mainline CEC_0.3V · HF / SI4732 tree in hf-si4732/ · Releases · Issue tracker ...

  C-BOARD for UV-K5 I created an externally mountable DSP-Board to process digital signals from UV-K5. DSP-Board was named C-Board. C-Board is divided into versions ranging from the simplest version to one that can be equipped with GPS.

Historical note: this post documents an early 2024 build and is kept for reference. For current firmware, use C-Board Firmware v0.32 , and see CEC UV-K5 Firmware Source Is Now Open for the source code. Introducing UV-K5 Version 0.3Q (Stable version,  added FT8 QSO) Version 0.3Q is mostly the same as version 0.3C. If you are already using 0.3C and do not plan to run FT8, no update is required. Since 0.3C was tested by several beta testers and there were no major problems, we only changed the name to the stable version 0.3Q.

Historical note: this post documents an early 2024 build and is kept for reference. For current firmware, use C-Board Firmware v0.32 , and see CEC UV-K5 Firmware Source Is Now Open for the source code. ▶ Watch the HF 0.5 fullband walkthrough on YouTube → Subscribe to the KD8CEC YouTube channel for more UV-K5 HF videos. Related: UV-K5 · si4732 · HF full band  Introduction to UV-K5 HF 0.5 (Fullband receive version) This is an introduction to UV-K5 HF full-band reception firmware 0.4HF using SI4732-A10. This version is released separately from the existing UV-K5 CEC firmware version. because space is needed to store a large PATCH file to use SI4732-A10's SSB. This article only describes the features newly added in Version 0.5. Please check the links below for full features. How to modify your hardware http://www.hamskey.com/2024/02/uv-k5s-hf-full-band-reception-lsb-usb.html Version 0.3HF (Most feature descriptions are provided) http://www.hamskey....

Historical note: this post documents an early 2024 build and is kept for reference. For current firmware, use C-Board Firmware v0.32 , and see CEC UV-K5 Firmware Source Is Now Open for the source code.  Introducing UV-K5 Version 0.3C (Added WSPR , APRS TX with PC ) Version 0.3C includes tasks associated with computers. You can use the same cable you used to update the firmware. If you just want to receive APRS you will need some modifications. This modification can also be used for FT8 communication that will be supported in the future.

Historical note: this post documents an early 2024 build and is kept for reference. For current firmware, use C-Board Firmware v0.32 , and see CEC UV-K5 Firmware Source Is Now Open for the source code.   Introduction to UV-K5 HF Fullband receive Version 0.41 (Changed from 0.40) This is an introduction to UV-K5 HF full-band reception firmware 0.4HF using SI4732-A10. This version is released separately from the existing UV-K5 CEC firmware version. because space is needed to store a large PATCH file to use SI4732-A10's SSB. 0.4HF added several functions to use SSB for shortwave radio and amateur radio.