update: id + reference update

patch-1
sandeep 2021-12-14 21:07:46 +05:30
parent 82e553895a
commit c9ddd7a0ae
2 changed files with 7 additions and 6 deletions

View File

@ -34,5 +34,3 @@ requests:
- type: dsl - type: dsl
dsl: dsl:
- '!contains(tolower(body), "<html")' - '!contains(tolower(body), "<html")'
- '!contains(tolower(body), "<HTML")'
condition: or

View File

@ -1,13 +1,16 @@
id: hdnetwork-realtime-lfi id: CVE-2021-45043
info: info:
name: HD-Network Real-time Monitoring System 2.0 - Local File Inclusion name: HD-Network Real-time Monitoring System 2.0 - Local File Inclusion
author: Evan Rubinstein author: Evan Rubinstein
severity: high severity: high
description: Instances of HD-Netowrk Real-time Monitoring System version 2.0 are vulnerable to a Local File Inclusion (LFI) vulnerability which allows remote unauthenticate attackers to view important, confidnetial information. description: Instances of HD-Netowrk Real-time Monitoring System version 2.0 are vulnerable to a Local File Inclusion (LFI) vulnerability which allows remote unauthenticate attackers to view important, confidnetial information.
reference: https://www.exploit-db.com/exploits/50588 reference:
- https://www.exploit-db.com/exploits/50588
- https://twitter.com/theCyberGuy0/status/1470669811269181444
metadata: metadata:
google-dork: intitle:"HD-Network Real-time Monitoring System V2.0" google-dork: intitle:"HD-Network Real-time Monitoring System V2.0"
tags: hdnetwork,lfi,iot,camera tags: cve,cve2021,hdnetwork,lfi,iot,camera
requests: requests:
- raw: - raw: