References https://github.com/ibaiw/2024Hvv/blob/main/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%89%8D%E5%8F%B0RCE.md https://github.com/adysec/POC/blob/main/wpoc/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%B3%BB%E7%BB%9Fdetection%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8RCE%E6%BC%8F%E6%B4%9E.md https://blog.csdn.net/xiayu729100940/article/details/139810232 http://www.wwlib.cn/index.php/artread/artid/12100.html https://github.com/MInggongK/Hikvision- https://github.com/zzxx191z/article/details/140742531 https://zhuanlan.zhihu.com/p/639514473 https://net.xju.edu.cn/info/1158/1512.htm https://www.lmboke.com/archives/hai-kang-wei-shi-zong-he-an-fang-guan-li-ping-tai-ren-yi-wen-jian-du-qu-lou-dong https://adm8n.github.io/%E6%BC%8F%E6%B4%9E%E5%A4%8D%E7%8E%B0/%E6%B5%B7%E5%BA%B7%E5%A8%81%E8%A7%86isecure%20center%20%E7%BB%BC%E5%90%88%E5%AE%89%E9%98%B2%E7%AE%A1%E7%90%86%E5%B9%B3%E5%8F%B0%E5%AD%98%E5%9C%A8%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E/ https://www.hikvision.com/cn/support/CybersecurityCenter/SecurityNotices/20210919/
Related VulnerabilitiesPoCCVE-2026-25527: changedetection.io <= 0.52.9 - Unauthenticated Path Traversalchangedetection.io /static/%2e%2e/flask_app.py 目录遍历漏洞(CVE-2026-25527)changedetection.io <= 0.53.9 存在路径遍历漏洞(CVE-2026-25527)PoCdbgate-anonymous-access: DbGate Anonymous Access - DetectionPoCCVE-2026-27645: Changedetection.io RSS Single Watch - Cross-Site Scriptingchangedetection.io存在反射xss漏洞(CVE-2026-27645)PoCCVE-2025-62780: ChangeDetection.io <= v0.50.33 - Stored XSS via Watch APIPoCopennms-dashboard-exposure: OpenNMS Dashboard - Exposure DetectionPoCCVE-2019-5591: FortiOS - Insecure LDAP Configuration DetectionPoCCVE-2024-28200: N-able N-central < 2024.2 - Authentication Bypass DetectionPoCsmtp-credentials-exposure: SMTP Credentials Exposure - DetectionPoCmailgun-takeover: Mailgun Takeover Detectionhoneypot-detection: Honeypot Detection