Ncast盈可视高清智能录播系统 CVE-2024-0305 远程命令注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://cn-sec.com/archives/2526156.html
• https://cn-sec.com/archives/2397975.html
• https://cn-sec.com/archives/2388937.html
• https://blog.csdn.net/qq_44905116/article/details/135502894
• https://blog.csdn.net/qq_36618918/article/details/135557476
• https://github.com/dontian122/POC
• https://github.com/xingchennb/POC-
• https://github.com/zan8in/pocwiki
• https://update.nsfocus.com/update/listNewNfbDetail/v/ips7.0
• https://wiki.shikangsi.com/list/wiki/?page=60
• https://lmboke.com/archives/cve-2024-0305
• https://cn-sec.com/archives/2526156.html
• https://cn-sec.com/archives/2397975.html
• https://cn-sec.com/archives/2388937.html

Related Vulnerabilities

• Owncast /api/admin/serverconfig 默认口令漏洞
• PoCowncast-default-login: Owncast - Default Credentials
• Owncast存在默认口令
• PoCCVE-2023-3188: Owncast - Server Side Request Forgery
• PoCCVE-2024-0305: Ncast busiFacade - Remote Command Execution
• PoCCVE-2024-0305: Ncast盈可视高清智能录播系统存在RCE漏洞
• PoCncast-lfi: Ncast HD Intelligent Recording - Arbitrary File Reading
• Ncast盈可视 高清智能录播系统 downloadLog.php 存在任意文件读取漏洞
• Ncast盈可视 高清智能录播系统存在命令执行漏洞