cve-2021-45043

cve-2021-45043 HD-Network Real-time Monitoring System 2.0 では、/language/lang の sLanguage パラメータを介して、../ ディレクトリトラバーサルにより /etc/shadow を読み取ることができます。 初期投稿 https://cyberguy0xd1.medium.com/my-cve-2021-45043-lfi-write-up-441dad30dd7f Burp 経由での悪用 GET /language/lang HTTP/1.1 Host: IP.target Cookie:...

CVE-2021-45043

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter...

Directory traversal

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang sLanguage parameter...

CVE-2021-45043

HD-Network Real-time Monitoring System 2.0 is affected by a Local File Inclusion vulnerability. The NUCLEI template for CVE-2021-45043 describes an LFI flaw exposed via the /language/lang s_Language parameter, enabling remote unauthenticated attackers to view confidential information (e.g., /etc/...

HD-Network Real-time Monitoring System 2.0 - Local File Inclusion (LFI)

Exploit Title: HD-Network Real-time Monitoring System 2.0 - Local File Inclusion LFI Google Dork: intitle:"HD-Network Real-time Monitoring System V2.0" Date: 11/12/2021 Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: N/A Version: V2.0 Tested on: Nginx NVRDVRIPC Web Server Proof of...

HD-Network Real-time Monitoring System 2.0 - Local File Inclusion Vulnerability

Exploit Title: HD-Network Real-time Monitoring System 2.0 - Local File Inclusion LFI Google Dork: intitle:"HD-Network Real-time Monitoring System V2.0" Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: N/A Version: V2.0 Tested on: Nginx NVRDVRIPC Web Server Proof of Concept: GET...

Weak password vulnerability in DH-SD6C82E-GN of Zhejiang Dahua Technology Co.

The DH-SD6C82E-GN is an HD network dome camera. DH-SD6C82E-GN of Zhejiang Dahua Technology Co. Ltd. suffers from a weak password vulnerability that can be exploited by attackers to obtain sensitive information...