Update nuuo-nvrmini2-rce.yaml

patch-1
Prince Chaddha 2022-05-31 14:52:46 +05:30 committed by GitHub
parent c4aec5a0d1
commit bbc9bd2a84
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions

View File

@ -4,7 +4,8 @@ info:
name: NUUO NVRmini 2 3.0.8 - Remote Code Execution
author: berkdusunur
severity: critical
description: NUUO NVRmini 2 3.0.8 is susceptible to remote code execution.
description: |
NUUO NVRmini 2 3.0.8 is susceptible to remote code execution.
reference:
- https://www.exploit-db.com/exploits/45070
- https://github.com/berkdsnr/NUUO-NVRMINI-RCE
@ -14,7 +15,7 @@ info:
cvss-score: 10.0
cve-id:
cwe-id: CWE-77
tags: rce,nuuo
tags: rce,nuuo,nvrmini
requests:
- method: GET
@ -24,9 +25,9 @@ requests:
matchers-condition: and
matchers:
- type: word
part: body
words:
- "/upload_tmp_dir/"
part: body
- type: status
status: