Lucene search
+L

1308 matches found

Kitploit
Kitploit
added 2026/09/12 6:17 a.m.7 views

CVE-2025-65791

CVE-2025-65791 — Command Injection in ZoneMinder Overview A critical Command Injection vulnerability exists in ZoneMinder v1.36.34 due to improper input validation in the web/views/image.php component. Unsanitized user-controlled input is passed directly to the PHP exec function, allowing remote...

9.8CVSS5.9AI score0.01649EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/12 3:21 a.m.6 views

CVE-2023-26035

CVE-2023-26035 ZoneMinder Snapshots - Sin autenticar Instalación Clonar repositorio root@kitploit: $ git clone https://github.com/Yuma-Tsushima07/CVE-2023-26035.git Configuración Nota: Instala la última versión de node root@kitploit: $ npm init $ npm i axios cheerio yargs Uso root@kitploit:...

9.8CVSS7.9AI score0.80462EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/12 2:31 a.m.3 views

zoneminder

ZoneMinder Toda la documentación de ZoneMinder está ahora disponible en línea en https://zoneminder.readthedocs.org Resumen ZoneMinder es un conjunto integrado de aplicaciones que proporcionan una solución de vigilancia completa, permitiendo la captura, análisis, grabación y monitoreo de cualquie...

5.7AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 10:09 p.m.5 views

CVE-2016-10140-Zoneminder-Poc

Zoneminder Acceso no autorizado CVE-2016-10140 Poc--Script de verificación masiva Descripción de la vulnerabilidad ZoneMinder es un sistema de videovigilancia de código abierto. Cuando ocurre un evento anómalo, puede recibir una notificación por correo electrónico o mensaje de texto. En la...

7.5CVSS7.4AI score0.06739EPSS
SaveExploits2
CVE
CVE
added 2026/09/11 9:31 p.m.10 views

CVE-2026-54258

ZoneMinder , a free open-source closed-circuit television (CCTV) application, is affected by an authorization bypass in direct event media endpoints. In versions prior to 1.36.39 , 1.38.4 , and 1.39.11 , an authenticated low-privileged user holding only coarse Events=View and/or Snapshots=View pe...

6.5CVSS0.00026EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/11 11:16 a.m.5 views

CVE-2023-26035

CVE-2023-26035 RCE no autenticado en ZoneMinder Snapshots - Exploit PoC alt img Descripción Las versiones de ZoneMinder anteriores a 1.36.33 y 1.37.33 son vulnerables a la ejecución remota de código no autenticada debido a la falta de controles de autorización en la acción de snapshot. Uso...

9.8CVSS7.9AI score0.80462EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/11 9:33 a.m.9 views

zoneminder-snapshots-rce-poc

Zoneminder RCE no autenticado a través de Snapshots CVE-2023-26035 POC Este es un script escrito en Python que permite la explotación de la falla de seguridad de Zoneminder descrita en CVE-2023-26035. El sistema es vulnerable en versiones anteriores a 1.36.33 y 1.37.33. Uso Clona el repositorio e...

9.8CVSS7.9AI score0.80462EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/11 6:38 a.m.5 views

CVE-2022-29806

CVE-2022-29806 ZoneMinder hasta 1.36.12 Escalada de privilegios de idioma y RCE Descripción Una vulnerabilidad de Path Traversal en el archivo de registro de depuración y la opción de idioma predeterminado en ZoneMinder versiones anteriores a 1.36.13 y 1.37.11 permite a los atacantes escribir y...

9.8CVSS8.2AI score0.67128EPSS
SaveExploits6
Kitploit
Kitploit
added 2026/09/11 6:32 a.m.5 views

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Un script de bash que demuestra la explotación manual de CVE-2016-10204 contra un endpoint objetivo, que lleva a la subida de una webshell php. Actualmente, la variable webshell está configurada para un payload de MySQL. Esto se puede reemplazar con cualquier backend que...

9.8CVSS8.1AI score0.02082EPSS
SaveExploits2
Nuclei
Nuclei
added 2026/09/11 5:22 a.m.112 views

ZoneMinder - SQL Injection

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61. id: CVE-2024-43360 info: name: ZoneMinder - SQL Injection author: s4e-io severity: critical...

9.8CVSS7.2AI score0.06222EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2026/09/11 12:47 a.m.16 views

CVE-2026-76060_ZoneMinder_CommandInjection-PoC

just wait and see Proof of concept for an OS command injection vulnerability in ZoneMinder's event export functionality web/includes/downloadfunctions.php. Monitor names are interpolated directly into shell commands using manual single-quote wrapping instead of escapeshellarg. An attacker who can...

8.8CVSS5.8AI score0.02315EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/11 12:00 a.m.9 views

PT-2026-90510

ZoneMinder is a free, open source closed-circuit television software application. Versions prior to 1.36.39, 1.38.4, and 1.39.11 allow an authenticated low-privileged user with coarse Events=View and/or Snapshots=View permissions to directly fetch media for events belonging to monitors they are n...

6.5CVSS0.00026EPSS
SaveExploits0References3
Kitploit
Kitploit
added 2026/09/10 11:45 p.m.9 views

CVE-2023-26035

POC para CVE-2023-26035 Funciona para ZoneMinder versiones anteriores a 1.36.33 y 1.37.33 Vulnerabilidad: Ejecución remota de código RCE Uso root@kitploit: └─➜ python3 poc.py -h usage: poc.py -h --target TARGET --cmd CMD poc.py: error: the following arguments are required: --target, --cmd Curl...

9.8CVSS7.8AI score0.80462EPSS
SaveExploits11References1
Kitploit
Kitploit
added 2026/09/10 7:17 p.m.3 views

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Scripts en Python para la explotación de CVE-2024-51482 SQLi en ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Descripción Este script automatiza la extracción de bases de datos, tablas, columnas y credenciales aprovechando CVE-2024-51482, una vulnerabilidad de...

9.9CVSS8.2AI score0.34979EPSS
SaveExploits8
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.301 views

ZoneMinder Snapshots - Command Injection

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the...

9.8CVSS7.5AI score0.80462EPSS
SaveExploits11References5
Nuclei
Nuclei
added 2026/09/10 4:50 a.m.156 views

ZoneMinder v1.37.* <= 1.37.64 - SQL Injection

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37. = 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65. id: CVE-2024-51482 info: name: ZoneMinder v1.37. = 1.37.64 - SQL Injection author...

9.9CVSS8AI score0.34979EPSS
SaveExploits8References2
Kitploit
Kitploit
added 2026/09/10 1:30 a.m.11 views

CVE-2026-27470

⚠️ YASAL UYARI / LEGAL DISCLAIMER Bu araç yalnızca eğitim amaçlı ve yazılı izin alınmış güvenlik testleri için geliştirilmiştir. Sahip olmadığınız veya test etmek için açık yazılı izniniz olmayan sistemlere karşı kullanılması yasadışıdır. Yetkisiz erişim, birçok ülkede ağır cezai yaptırımlara...

8.8CVSS5.8AI score0.0048EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/10 1:00 a.m.10 views

CVE-2026-27470-POC

CVE-2026-27470 — ZoneMinder Second-Order SQL Injection PoC Author:d3vn0mi | CVSS 8.8 | Authenticated | Events Permission Required Overview CVE-2026-27470 is a second-order SQL injection vulnerability in ZoneMinder's web/ajax/status.php — specifically the getNearEvents function...

8.8CVSS5.9AI score0.0048EPSS
SaveExploits2References1
Kitploit
Kitploit
added 2026/09/08 2:11 p.m.8 views

CVE-2024-51482-POC

ZoneMinder PoC de inyección SQL ciega basada en tiempo autenticada - CVE-2024-51482 ⚠️ Solo para fines educativos e investigación de seguridad autorizada. Ejecutar esta herramienta contra sistemas que no poseas o para los cuales no tengas permiso por escrito es ilegal. Índice ZoneMinder PoC de...

9.9CVSS8.1AI score0.34979EPSS
SaveExploits8
Kitploit
Kitploit
added 2026/09/08 7:55 a.m.7 views

CVE-2023-26039

CVE-2023-26039 Descripción ZoneMinder es una aplicación de software de televisión de circuito cerrado gratuita y de código abierto para Linux que admite cámaras IP, USB y analógicas. Las versiones anteriores a 1.36.33 y 1.37.33 contienen una inyección de comandos del sistema operativo a través de...

8.8CVSS8AI score0.01246EPSS
SaveExploits1
Rows per page
Query Builder