CVE-2025-60787

CVE-2025-60787 - Authenticated RCE in motionEye PoC for CVE-2025-60787 that is an Authenticated RCE vulnerability for motionEye with all afected versions up to 0.43.1b4 included. This is an automated PoC for the vulnerability described in this repository. Credits to prabhatverma47. Usage The scri...

CVE-2025-60787_PoC

CVE-2025-60787 - MotionEye RCE RCE autenticado en MotionEye = 0.43.1b4 mediante la omisión de la validación del lado del cliente en el campo imagefilename. Uso root@kitploit: nc -lvnp 4444 python exploit.py -t http://127.0.0.1:8765 -p password -lh IP -lp 4444 Banderas...

motionEye-RCE-through-config-parameter

RCE en MotionEye mediante bypass de validación del lado del cliente Resumen Durante las pruebas de seguridad de una instancia de MotionEye ejecutándose en Docker, se observó que la validación del lado del cliente dentro de la interfaz web puede omitirse. Esto permite enviar entradas arbitrarias,...

cctv

CCTV — HackTheBox Walkthrough Platform: HackTheBox | OS: Linux Attack Chain ZoneMinder SQL injection via CVE-2024-51482 dumps a bcrypt hash from the database. Cracking it with hashcat gives SSH access. Internal motionEye instance exposed via port forwarding is vulnerable to CVE-2025-60787 —...

MotionEye Config Info Disclosure

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured. id: CVE-2022-25568 info: name: MotionEye Config Info Disclosure author: DhiyaneshDK severity: high...

CVE-2025-60787

CVE-2025-60787 — motionEye RCE autenticado PoC de inyección de comandos autenticada para CVE-2025-60787. motionEye v0.43.1b4 y versiones anteriores escriben valores de configuración de cámara controlados por el usuario, como imagefilename, en la configuración de Motion sin una sanitización...

motioneye-authenticated-RCE

RCE autenticado en MotionEye/MotionEyeOS Un script de Python 3 que sube un archivo tasks.pickle que permite RCE en MotionEye. Necesitas credenciales de administrador, así que no debería ser un gran problema. Desafortunadamente, MotionEye/MotionEyeOS se puede encontrar frecuentemente ejecutándose...

CVE-2025-60787-MotionEye-RCE

CVE-2025-60787: Motioneye - Ejecución Remota de Código RCE Prueba de concepto PoC profesional para CVE-2025-60787, una vulnerabilidad crítica de Ejecución Remota de Código RCE en MotionEye versiones ≤ 0.43.1b4. Resumen Técnico La vulnerabilidad surge de un bypass de validación del lado del client...

CVE-2025-60787-POC

CVE-2025-60787 - RCE autenticado en motionEye Ejecución remota de código autenticada en motionEye = 0.43.1b4 a través de un parámetro de configuración de motion sin saneamiento Autor: d3vn0mi Resumen de la vulnerabilidad...

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

README.md Detección de CVE-2025-60787: RCE en motionEye mediante inyección de configuración Ejecución remota de código no autenticada en motionEye Imágenes fijas - Nombre de archivo de imagen Ejemplo de payload PoC: root@kitploit: $touch /tmp/test.%Y-%m-%d-%H-%M-%S...

CVE-2025-60787

CVE-2025-60787 CVE-2025-60787 Poc - RCE - MotionEye = 0.43.1b4 Enlace original: https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter MotionEye RCE mediante omisión de validación del lado del cliente Resumen Durante las pruebas de seguridad de una instancia de MotionEye...

CVE-2025-60787

CVE-2025-60787 - MotionEye RCE MotionEye v0.43.1b4 Inyección de Comandos del SO Un exploit de prueba de concepto de Inyección de Comandos del SO para la vulnerabilidad en motionEye, una interfaz web para el demonio motion. La vulnerabilidad abusa del parámetro de configuración imagefilename, el...

PYSEC-2026-2665 motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution

Summary The ActionHandler.post method in motionEye has no authentication decorator, allowing any unauthenticated attacker to trigger camera actions including snapshots, recording start/stop, and configured action scripts PTZ controls, alarm triggers, etc.. Vulnerability Details File:...

PYSEC-2026-2667 motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

Summary mEye contains an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files from the filesystem. The affected handlers accept a user-controlled filename parameter and construct filesystem paths using os.path.join. When an absolute...

PYSEC-2026-2664 motionEye has an Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint

Summary motionEye v0.43.1 latest stable is vulnerable to path traversal in the picture and movie API endpoints, like /picture/id/preview/filename. Neither the API handlers, nor the mediafiles.py functions like getmediapreview check for .. sequences in the filename parameter, except getmediaconten...

PYSEC-2026-2666 motionEye's World-Readable Configuration File Exposes Admin Password Hash

Security Advisory: World-Readable Configuration File Exposes Admin Password Hash in motionEye Summary motionEye v0.43.1 and prior versions create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contai...

PYSEC-2026-1680 motionEye vulnerable to RCE via unsanitized motion config parameter

Summary A command injection vulnerability in MotionEye allows attackers to achieve Remote Code Execution RCE by supplying malicious values in configuration fields exposed via the Web UI. Because MotionEye writes user-supplied values directly into Motion configuration files without sanitization,...

PYSEC-2026-681 Unrestricted Upload of File with Dangerous Type in motionEye

motionEye = 0.42.1 and motioneEyeOS = 20200606 allow a remote attacker to upload a configuration backup file containing a malicious python pickle file. This is possible when an installation is accessible over the Internet and uses no or poor authentication credentials. The GitHub repositories for...

PYSEC-2026-428 motionEye: Authentication possible via password hash

Summary An authentication bypass vulnerability exists due to improper trust in client-controlled cookies. The application accepts user-supplied cookie values containing a username and password-hash-derived value as sufficient authentication material. These cookies can be set or modified prior to...

CVE-2026-32315

motionEye mEye is an online interface for motion software, a video surveillance program with motion detection. Versions prior to 0.44.0 create the configuration file /etc/motioneye/motion.conf with 644 permissions -rw-r--r--, making it readable by any local user on the system. This file contains...