24 matches found
zoneminder-snapshots-rce-poc
Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035 POC This is a script written in Python that allows the exploitation of the Zoneminder's security flaw described in CVE-2023-26035. The system is vulnerable in versions preceding 1.36.33 and 1.37.33. Usage Clone the repository to your...
zoneminder_CVE-2023-26035
Exploit - ZoneMinder CVE-2023-26035 There is a Unauthenticated Remote Code Execution RCE affecting ZoneMinder Snapshots. This is an exploit for CVE-2023-26035. Affected versions ZoneMinder 1.36.33 and ZoneMinder 1.37.33. Usage Check if the target is vulnerable: python3 zoneminder.py http://target...
Fortinet FortiWeb Broken access control in the RADIUS type admin group (FG-IR-26-158)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-158 advisory. - An Improper Authentication vulnerability CWE-287 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0...
CVE-2026-26035
creationtimestamp| type| source ---|---|--- 2026-08-12 14:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvc3lbwvq2a 2026-08-13 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mswyb2g22323 2026-08-13 10:21:45+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2023-26035
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33...
ZoneMinder Snapshots Remote Code Execution
import re import requests from bs4 import BeautifulSoup import argparse import base64 Exploit Title: Unauthenticated RCE in ZoneMinder Snapshots Date: 12 December 2023 Discovered by : @Unblvr1 Exploit Author: Ravindu Wickramasinghe @rvizx9 Vendor Homepage: https://zoneminder.com/ Software Link:...
CVE-2024-26035
creationtimestamp| type| source ---|---|--- 2024-03-18 19:27:19+00:00| seen| https://t.me/ctinow/210876...
CVE-2024-26035 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
CVE-2024-26035
Adobe Experience Manager (AEM) 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields (CWE-79). The issue allows an attacker to inject malicous scripts, which may execute in a victim’s browser when visiting the affected page; exploitation requires user interaction...
ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE
import re import requests from bs4 import BeautifulSoup import argparse import base64 Exploit Title: Unauthenticated RCE in ZoneMinder Snapshots Date: 12 December 2023 Discovered by : @Unblvr1 Exploit Author: Ravindu Wickramasinghe @rvizx9 Vendor Homepage: https://zoneminder.com/ Software Link:...
Exploit for Missing Authorization in Zoneminder
Exploit - ZoneMinder CVE-2023-26035 There is a Unauthentica...
Exploit for Missing Authorization in Zoneminder
CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated !image...
Exploit for Missing Authorization in Zoneminder
POC for CVE-2023-26035 Works for ZoneMinder Versions prior...
Exploit for Missing Authorization in Zoneminder
Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035...
Exploit for Missing Authorization in Zoneminder
CVE-2023-26035 Unauthenticated RCE in ZoneMinder Snapshots - P...
ZoneMinder Snapshots Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ZoneMinder Snapshots Command Injection', 'Description' = %q This module exploits an unauthenticated command injection in zoneminder that can be...
ZoneMinder Snapshots Command Injection Exploit
This Metasploit module exploits an unauthenticated command injection in zoneminder that can be exploited by appending a command to an action of the snapshot view. Versions prior to 1.36.33 and 1.37.33 are affected. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2023-26035
creationtimestamp| type| source ---|---|--- 2023-11-10 20:44:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zonemindersnapshots.rb 2023-12-11 20:34:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6140 2023-12-12...
CVE-2023-26035
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...
CVE-2023-26035
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...