diff --git a/Thecus/Thecus NAS/README.md b/Thecus/Thecus NAS/README.md new file mode 100644 index 0000000..c681502 --- /dev/null +++ b/Thecus/Thecus NAS/README.md @@ -0,0 +1,9 @@ +# Thecus NAS Post Auth Command Injection + +Thecus N4800Eco NAS server control panel suffers from a command injection vulnerability. + +FOFA **query rule**: [Elecom-Thecus-NAS](https://fofa.so/result?qbase64=YXBwPSJFbGVjb20tVGhlY3VzLU5BUyI%3D) + +# Demo + +![Thecus_NAS_Post_Auth_Command_Injection](Thecus_NAS_Post_Auth_Command_Injection.gif)