Nas — PoC Archivehttps://poc.intelseclab.com/tags/nas/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000ZimaOS Arbitrary File Write via Unvalidated File API Path — CVE-2026-28286https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28286-zimaos-arbitrary-file-write/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-28286-zimaos-arbitrary-file-write/Critical severity — web · CVE-2026-28286. Status: PoC. Affects: ZimaOS (NAS / home-server operating system), file API endpoint /v2_1/files/file. Tags: zimaos, nas, arbitrary-file-write, path-traversal, api-misconfiguration, rce, home-server.webCriticalzimaosnasarbitrary-file-writepath-traversalapi-misconfigurationrcehome-serverASUSTOR ADM vpnupload.cgi Format String / Stack Buffer Overflow RCE — CVE-2026-6643https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-6643-asustor-adm-vpnupload-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/binary/2026-07-05_cve-2026-6643-asustor-adm-vpnupload-rce/Critical severity — binary · CVE-2026-6643. Status: PoC. Affects: ASUSTOR ADM (ASUSTOR Data Master), /portal/apis/settings/vpnupload.cgi (upload_wireguard action). Tags: asustor, adm, nas, format-string, stack-buffer-overflow, cwe-134, cwe-121, rce, wireguard.binaryCriticalasustoradmnasformat-stringstack-buffer-overflowcwe-134cwe-121rcewireguardTossUp — TerraMaster TOS Unauthenticated Redis Root RCE + NFS LPEhttps://poc.intelseclab.com/pocs/network/2026-05-18_tossup-terramaster-redis-rce/Mon, 18 May 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-05-18_tossup-terramaster-redis-rce/Critical severity — network · N/A (vendor confirmed TOS4 is EOL; no fix planned). Status: Weaponized. Affects: TerraMaster TOS3_A1.0 4.2.41, Redis 4.0.10. Tags: RCE, unauthenticated, Redis, TerraMaster, NAS, AArch64, root, module-loading, replication-abuse, NFS, no_root_squash, LPE, network.networkCriticalRCEunauthenticatedRedisTerraMasterNASAArch64rootmodule-loadingreplication-abuseNFSno_root_squashLPEnetwork