Jack Doan

2 exploits Active since Nov 2018

CVE-2018-19537 NOMISEC HIGH WORKING POC

TP-Link Archer C5 Firmware < V2_160201_US - Authenticated Remote Command Execution via Configuration File Upload

TP-Link Archer C5 devices through V2_160201_US allow remote command execution via shell metacharacters on the wan_dyn_hostname line of a configuration file that is encrypted with the 478DA50BF9E3D2CF key and uploaded through the web GUI by using the web admin account. The default password of admin may be used in some cases.

20 stars

CVSS 7.2

View Code

CVE-2026-25793 WRITEUP HIGH WRITEUP

Nebula 1.7.0-1.10.2 - Blocklist Bypass via ECDSA Signature Malleability

Nebula is a scalable overlay networking tool. In versions from 1.7.0 to 1.10.2, when using P256 certificates (which is not the default configuration), it is possible to evade a blocklist entry created against the fingerprint of a certificate by using ECDSA Signature Malleability to use a copy of the certificate with a different fingerprint. This issue has been patched in version 1.10.3.

CVSS 8.1

View Code