CVE-2023-3836

대화 스마트 단지 종합 관리 플랫폼 publishing 파일 업로드 POC 종속성 설치 pip install argparse requests rich 참고: python3 환경을 사용합니다. 사용 python CVE-2023-3836.py -h 파일 내 URL 형식 실행 결과...

CVE-2023-3836

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePointaddImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated...

CVE-2023-3836

creationtimestamp| type| source ---|---|--- 2023-08-20 20:43:57+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8883 2024-09-17 21:30:02+00:00| published-proof-of-concept| https://t.me/codeb0ss/1054 2025-02-20 00:00:00+00:00| exploited| The Shadowserver...

CVE-2023-3836 Dahua Smart Park Management unrestricted upload

A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devicePointaddImgIco?hasSubsystem=true. The manipulation of the argument upload leads to unrestricted upload. The attack can be initiated...

CVE-2023-3836

CVE-2023-3836 affects Dahua Smart Park Management prior to 20230713. Multiple connected sources confirm an unrestricted/unauthorized file upload vulnerability in the endpoint /emap/devicePoint_addImgIco?hasSubsystem=true, enabling remote file upload and potentially remote code execution or full s...