Improper input validation in Motioneye Project
CVSS score
7.2
EPSS probability
%18.5
Risk score
1.3
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
MotionEye OS Command Injection (CVE-2025-60787)
CVE-2025-60787 motionEye authenticated command injection RCE PoC
Python PoC for CVE-2025-60787, authenticated OS command injection RCE in motionEye <= 0.43.1b4 via unsanitized image_file_name config
Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowing attackers to execute arbitrary commands via configuration files.
PoC for CVE-2025-60787 - Authenticated RCE in motionEye for all versions up to 0.43.1b4 (included)
GarethMSheldon/CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection
CVE-2025-60787 Poc - RCE - MotionEye <= 0.43.1b4
https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter
Similar Vulnerabilities
motionEye: Authentication possible via password hash
motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-60787"