Nguyen Ba Nam Dung

Nguyen Ba Nam Dung

Also known as: greengrass, Orange TsailαΊ§m

Researcher

β—† Security Research

A code reader trying to get bounties through methods varying from nobrain fuzzing to implementation flaw finding. Targeting Synology NAS and QNAP NAS

πŸ”’
10
Advisories
3 this year
πŸ“š
0
Publications
Research papers
πŸ†
1
Recognition
Awards & bounties
🏒
3
Vendors
Organizations

πŸ“Š Activity Overview

Last 12 Months Activity

Nov
2
Dec
Jan
2
Feb
Mar
1
Apr
May
Jun
Jul
Aug
Sep
Oct

Top Vendors

Synology 7 vulnerabilities
NeoJapan 2 vulnerabilities
QNAP 1 vulnerability

Discovery Timeline

2026

3 advisories
πŸ”’ Advisory
CVE-2026-76954
Synology DSM Pre-Auth Zero-Click Remote Code Execution Vulnerability
Synology
πŸ”’ Advisory
VCSA-2026-Q3-01
Synology Package Normal User Zero-Click Remote Code Execution
Synology
πŸ”’ Advisory
CVE-2026-6205
Synology DSM Post-Auth Remote Code Execution
Synology

2025

7 advisories , 1 award
πŸ”’ Advisory
CVE-2025-59387
QNAP Package Unauthenticated Remote Execution
QNAP
πŸ”’ Advisory
VCSA-SYNOLOGY-2025-01
Synology Package Unauthenticated Remote Execution
Synology
πŸ† Recognition
Top 5 Pwn2Own Ireland (IoT) 2025
Canon, Lexmark, Home Assistant, Philips
πŸ… Pwn2Own
πŸ”’ Advisory
VCSA-SYNOLOGY-2025-02
Synology Default Package Post-Auth SQL Injection leads to RCE
Synology
πŸ”’ Advisory
VCSA-DESKNET-2025-01
Desknet's NEO Pre-Auth Command Injection
NeoJapan
πŸ”’ Advisory
VCSA-DESKNET-2025-02
Desknet's NEO Pre-Auth Buffer Overflow
NeoJapan
πŸ”’ Advisory
VCSA-2026-Q1-02
Synology Package Pre-Auth Remote Code Execution
Synology
πŸ”’ Advisory
VCSA-2026-Q1-01
Synology Common Package Normal User Remote Code Execution
Synology

πŸ”’ CVE Advisories 10

Security vulnerabilities discovered and disclosed

πŸ† Recognition & Highlights 1

Bug bounty rewards and achievements