Improper input validation in Motioneye Project
CVSS Skor
7.2
EPSS İhtimal
%18.5
Risk Skoru
1.3
Yayın
1 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
MotionEye OS Command Injection (CVE-2025-60787)
CVE-2025-60787 motionEye authenticated command injection RCE PoC
Python PoC for CVE-2025-60787, authenticated OS command injection RCE in motionEye <= 0.43.1b4 via unsanitized image_file_name config
Professional PoC for CVE-2025-60787: Remote Code Execution in MotionEye (<= 0.43.1b4). This exploit demonstrates an OS Command Injection vulnerability through client-side validation bypass, allowing attackers to execute arbitrary commands via configuration files.
PoC for CVE-2025-60787 - Authenticated RCE in motionEye for all versions up to 0.43.1b4 (included)
GarethMSheldon/CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection
CVE-2025-60787 Poc - RCE - MotionEye <= 0.43.1b4
https://github.com/prabhatverma47/motionEye-RCE-through-config-parameter
İlgili Benzer Açıklar
motionEye: Authentication possible via password hash
motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-60787"