CVEs-PoC/2022/CVE-2022-25568.md

CVE-2022-25568

Description

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.

POC

Reference

• https://www.pizzapower.me/2022/02/17/motioneye-config-info-disclosure/

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ArrestX/--POC
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Threekiii/Awesome-POC
• https://github.com/d4n-sec/d4n-sec.github.io