24 matches found
zoneminder-snapshots-rce-poc
Zoneminder RCE no autenticado a través de Snapshots CVE-2023-26035 POC Este es un script escrito en Python que permite la explotación de la falla de seguridad de Zoneminder descrita en CVE-2023-26035. El sistema es vulnerable en versiones anteriores a 1.36.33 y 1.37.33. Uso Clona el repositorio e...
zoneminder_CVE-2023-26035
漏洞利用 - ZoneMinder CVE-2023-26035 存在一个未认证远程代码执行（RCE）漏洞，影响 ZoneMinder的Snapshots。 这是针对CVE-2023-26035的一个漏洞利用 。 受影响版本 ZoneMinder 1.36.33 和 ZoneMinder 1.37.33。 用法 检查目标是否易受攻击： python3 zoneminder.py http://target 执行命令 python3 zoneminder.py http://target command 示例 使用ping测试命令执行...
Fortinet FortiWeb Broken access control in the RADIUS type admin group (FG-IR-26-158)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-158 advisory. - An Improper Authentication vulnerability CWE-287 vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0...
CVE-2026-26035
creationtimestamp| type| source ---|---|--- 2026-08-12 14:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvc3lbwvq2a 2026-08-13 06:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mswyb2g22323 2026-08-13 10:21:45+00:00| seen|...
Linux Distros Unpatched Vulnerability : CVE-2023-26035
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33...
ZoneMinder Snapshots Remote Code Execution
import re import requests from bs4 import BeautifulSoup import argparse import base64 Exploit Title: Unauthenticated RCE in ZoneMinder Snapshots Date: 12 December 2023 Discovered by : @Unblvr1 Exploit Author: Ravindu Wickramasinghe @rvizx9 Vendor Homepage: https://zoneminder.com/ Software Link:...
CVE-2024-26035
creationtimestamp| type| source ---|---|--- 2024-03-18 19:27:19+00:00| seen| https://t.me/ctinow/210876...
CVE-2024-26035
Adobe Experience Manager (AEM) 6.5.19 and earlier are affected by a stored XSS vulnerability in vulnerable form fields (CWE-79). The issue allows an attacker to inject malicous scripts, which may execute in a victim’s browser when visiting the affected page; exploitation requires user interaction...
CVE-2024-26035 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)
Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...
ZoneMinder Snapshots < 1.37.33 - Unauthenticated RCE
import re import requests from bs4 import BeautifulSoup import argparse import base64 Exploit Title: Unauthenticated RCE in ZoneMinder Snapshots Date: 12 December 2023 Discovered by : @Unblvr1 Exploit Author: Ravindu Wickramasinghe @rvizx9 Vendor Homepage: https://zoneminder.com/ Software Link:...
Exploit for Missing Authorization in Zoneminder
Exploit - ZoneMinder CVE-2023-26035 There is a Unauthentica...
Exploit for Missing Authorization in Zoneminder
CVE-2023-26035 ZoneMinder Snapshots - Unauthenticated !image...
Exploit for Missing Authorization in Zoneminder
POC for CVE-2023-26035 Works for ZoneMinder Versions prior...
Exploit for Missing Authorization in Zoneminder
Zoneminder Unauthenticated RCE via Snapshots CVE-2023-26035...
Exploit for Missing Authorization in Zoneminder
CVE-2023-26035 Unauthenticated RCE in ZoneMinder Snapshots - P...
ZoneMinder Snapshots Command Injection
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ZoneMinder Snapshots Command Injection', 'Description' = %q This module exploits an unauthenticated command injection in zoneminder that can be...
ZoneMinder Snapshots Command Injection Exploit
This Metasploit module exploits an unauthenticated command injection in zoneminder that can be exploited by appending a command to an action of the snapshot view. Versions prior to 1.36.33 and 1.37.33 are affected. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2023-26035
creationtimestamp| type| source ---|---|--- 2023-11-10 20:44:04+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/zonemindersnapshots.rb 2023-12-11 20:34:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6140 2023-12-12...
CVE-2023-26035
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...
CVE-2023-26035
ZoneMinder Snapshots (CVE-2023-26035) affects ZoneMinder prior to 1.36.33 and 1.37.33. The vulnerability is an Unauthenticated Remote Code Execution due to missing authorization in the snapshot action, where an attacker can craft the snapshot request to trigger shell_exec with a supplied id. Impa...