asaotomo/CVE-2016-10140-Zoneminder-Poc

PoC

Zoneminder 未授权访问批量检测工具：ZoneMinder v1.30和v1.29捆绑的Apache HTTP Server配置中存在信息泄露和认证绕过漏洞，允许远程未认证攻击者浏览web根目录下的所有目录。

view exploit source poc_in_githubauthor asaotomopublished 2021-12-21catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2016-10140US	high7.5	6.56% (94th)	Exploit	2017-01-13
Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthe…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.