漏洞描述
Hitron Systems DVR LGUVR-16H存在命令注入漏洞，此漏洞是由于system_ntp.cgi接口对用户的请求验证不当导致的。
Hitron Systems DVR LGUVR-16H CVE-2024-23842 命令注入漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-41419: QVIS NVR/DVR - Remote Code Execution
- QNAP Systems Photo Station 跨站脚本漏洞
- Dell KACE Systems Management Appliance (K1000)存在命令执行漏洞(CVE-2019-20504)
- POC CVE-2018-15745: Argus Surveillance DVR 4.0.0.0 - Local File Inclusion
- POC CVE-2018-9995: TBK DVR4104/DVR4216 Devices - Authentication Bypass
- POC CVE-2019-20504: Dell KACE Systems Management Appliance (K1000) 6.4.120756 - Remote Code Execution
- POC CVE-2021-42071: Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection
- POC CVE-2021-46417: Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion
- POC CVE-2022-24181: PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting
- POC CVE-2024-7339: TVT DVR Sensitive Device - Information Disclosure
- CVE-2025-8286: Güralp Systems FMUS Series - Unauthenticated Access
- POC CVE-2018-9995: DVR Authentication Bypass
- POC CVE-2021-46417: Franklin Fueling Systems tsaupload.cgi 任意文件读取漏洞