CVE-2024-51482-PoC

CVE-2024-51482-PoC Exploit de injeção SQL cega baseada em tempo autenticado para ZoneMinder v1.37. = 1.37.64 Visão Geral Este é um exploit de prova de conceito para CVE-2024-51482, uma vulnerabilidade de injeção SQL cega baseada em tempo na funcionalidade de gerenciamento de eventos do ZoneMinder...

CVE-2016-10204_Webshell

CVE-2016-10204Webshell Uno script bash che dimostra lo sfruttamento manuale di CVE-2016-10204 contro un endpoint target, portando al caricamento di una webshell php. Attualmente, la variabile webshell è impostata per un payload MySQL. Può essere sostituita con qualsiasi backend sia necessario...

CVE-2026-27470

⚠️ YASAL UYARI / LEGAL DISCLAIMER Bu araç yalnızca eğitim amaçlı ve yazılı izin alınmış güvenlik testleri için geliştirilmiştir. Sahip olmadığınız veya test etmek için açık yazılı izniniz olmayan sistemlere karşı kullanılması yasadışıdır. Yetkisiz erişim, birçok ülkede ağır cezai yaptırımlara...

CVE-2026-27470-POC

CVE-2026-27470 — ZoneMinder सेकंड-ऑर्डर SQL इंजेक्शन PoC लेखक:d3vn0mi | CVSS 8.8 | प्रमाणित | इवेंट्स अनुमति आवश्यक अवलोकन CVE-2026-27470 ZoneMinder के web/ajax/status.php में एक सेकंड-ऑर्डर SQL इंजेक्शन भेद्यता है — विशेष रूप से getNearEvents फ़ंक्शन में।...

sqli-hunter-CVE-2024-51482-PoC

sqli-hunter-CVE-2024-51482-PoC Script in Python per lo sfruttamento di CVE-2024-51482 SQLi in ZoneMinder — HTB CCTV sqli-hunter — CVE-2024-51482 Descrizione Questo script automatizza l'estrazione di database, tabelle, colonne e credenziali sfruttando CVE-2024-51482, una vulnerabilità di...

CVE-2023-26035

POC per CVE-2023-26035 Funziona per ZoneMinder Versioni precedenti a 1.36.33 e 1.37.33 Vulnerabilità : Remote Code Execution RCE Utilizzo root@kitploit: └─➜ python3 poc.py -h usage: poc.py -h --target TARGET --cmd CMD poc.py: error: the following arguments are required: --target, --cmd Curl Prima...

CVE-2024-51482

CVE-2024-51482 - Blind-SQL-Injection in ZoneMinder Inhaltsverzeichnis Überblick Schwachstellendetails Technische Analyse Exploit-Anleitung Installation Anwendungsbeispiele Gegenmaßnahmen Referenzen Überblick CVE-2024-51482 ist eine kritische boolesche SQL-Injection-Schwachstelle, die in ZoneMinde...

PT-2026-82281

Name of the Vulnerable Software and Affected Versions ZoneMinder affected versions not specified Description An authenticated OS command injection issue exists in the event export functionality. An authenticated user with View Events permission can execute arbitrary operating system commands on t...

zoneminder-snapshots-rce-poc

POC per RCE non autenticata in Zoneminder tramite Snapshots CVE-2023-26035 Questo è uno script scritto in Python che consente lo sfruttamento della falla di sicurezza di Zoneminder descritta in CVE-2023-26035. Il sistema è vulnerabile nelle versioni precedenti a 1.36.33 e 1.37.33. Utilizzo Clona ...

CVE-2024-51482-POC

ZoneMinder PoC SQLi basata sul tempo autenticato - CVE-2024-51482 ⚠️ Solo per scopi educativi e ricerca di sicurezza autorizzata. Eseguire questo strumento su sistemi di cui non si è proprietari o senza autorizzazione scritta è illegale. Indice ZoneMinder PoC SQLi basata sul tempo autenticato -...

Zoneminder

ADVISORY SUMMARY Successful exploitation of this vulnerability could result in full Remote Code Execution RCE as the web server user. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

CVE-2024-51482

CVE-2024-51482 — Iniezione SQL Cieca Basata sul Tempo in ZoneMinder Un exploit proof-of-concept per CVE-2024-51482 , una vulnerabilità di iniezione SQL cieca basata sul tempo e autenticata in ZoneMinder v1.37. ≤ 1.37.64. Lo script estrae nomi utente e hash delle password dalla tabella zm.Users...

zoneminder_CVE-2023-26035

Exploit - ZoneMinder CVE-2023-26035 Esiste una Esecuzione di codice in remoto non autenticata RCE che colpisce gli Snapshot di ZoneMinder. Questo è un exploit per CVE-2023-26035. Versioni affette ZoneMinder 1.36.33 e ZoneMinder 1.37.33. Utilizzo Verifica se il target è vulnerabile: root@kitploit:...

Linux Distros Unpatched Vulnerability : CVE-2026-72556

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the...

DEBIAN-CVE-2026-72556

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

CVE-2026-72556

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

UBUNTU-CVE-2026-72556

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

CVE-2026-72556 ZoneMinder ZoneMinder - Remote Code Execution

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

EUVD-2026-56026

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class. The canEdit and canDelete methods invoke nonexistent methods on the ZM\User class, causing PHP call to return a truthy valu...

CVE-2026-72556

ZoneMinder 1.39.17 exposes a remote code execution vulnerability via a broken permission check in the Filter class. The canEdit() and canDelete() methods call non-existent methods on the ZM\User class, causing PHP magic __call() to return a truthy value and bypass the permission check for all use...