CVE•Published 2021-09-22•1 article on news•6 live references•NVD data

CVE-2021-36260

Vulnerability data via CVEDB (Shodan)

CVSS v3.1

9.8

CRITICAL

EPSS percentile

100

Exploit Prediction Scoring System · top 0% of all CVEs

Description

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

Timeline

Published 2021-09-22

External references

NVD MITRE Exploit-DB GitHub PoC trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2021-36260

Hosts Shodan has explicitly fingerprinted as vulnerable.

More intel sources (5)

vuln:CVE-2021-36260

Country / ASN / product breakdown for the vuln query.

vulnerabilities.cve_id: CVE-2021-36260

Censys host search filtered to this CVE id.

CVE-2021-36260

Public source-code mentions — fast PoC discovery.

CVE-2021-36260

GitHub code search for direct mentions.

"CVE-2021-36260" exploit -site:nvd.nist.gov

Write-ups and news, NVD excluded.

Known PoCs on GitHub (8)

CVE-2021-362608 repos

Mr-xn/Penetration_Testing_POCHTML

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypas…

★ 7,501·updated 1d ago

Threekiii/Awesome-POCJava

一个漏洞 PoC 知识库。A knowledge base for vulnerability PoCs(Proof of Concept), with 1k+ vulnerabilities.

★ 5,210·updated 4mo ago

jorhelp/IngramPython

网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

★ 2,390·updated 1mo ago

eeeeeeeeee-code/POCunknown

备份的漏洞库，3月开始我们来维护

★ 2,227·updated 2mo ago

GhostTroops/TOPShell

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

★ 732·updated today

Ostorlab/KEVunknown

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

★ 619·updated 2d ago

Awrrays/FrameVulunknown

POC集合，框架nday漏洞利用

★ 463·updated 1y ago

tamim1089/HikvisionExploiterPython

HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version …

★ 388·updated 9mo ago