daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
nuclei-templates/http/iot/selea-ip-camera.yaml

35 lines
795 B
YAML
Raw Normal View History

Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
id: selea-ip-camera
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
info:
name: Detect Selea Targa IP OCR-ANPR Camera
author: geeknik
severity: info
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes
2022-04-22 10:38:41 +00:00
description: Various version of the Selea Targa IP OCR-ANPR Camera are vulnerable to an Unauthenticated RTP/RTSP/M-JPEG Stream Disclosure flaw
reference:
- https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5619.php
Update selea-ip-camera.yaml
2021-07-15 03:24:13 +00:00
tags: iot,selea,targa
Added max request counter of each template
2023-04-28 08:11:21 +00:00
metadata:
max-request: 1
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2023-04-27 04:28:59 +00:00
http:
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
- method: GET
path:
- "{{BaseURL}}"
matchers-condition: and
matchers:
- type: word
part: header
words:
- "SeleaCPSHttpServer"
Update selea-ip-camera.yaml
2021-07-15 03:24:13 +00:00
- "selea_httpd"
- "HttpServer/0.1"
condition: or
Create selea-ip-camera.yaml This only detects the presence of the camera control panel. It's up to the user to verify the "unauthenticated stream disclosure" exists. Please see the URL in the description for details.
2021-01-22 16:16:49 +00:00
- type: word
part: body
words:
- "Selea CarPlateServer"
- type: status
status:
- 200