Exploit for CVE-2025-60787-POC

kitploit · 2026-09-02

Description

Authenticated RCE in motionEye <= 0.43.1b4 via unsanitized motion config parameter.

Entry point

Parameterscheme · request body

Path/config/add/

OS command injection risk during dynamic camera addition via configuration payload (image_file_name not involved here; exploit chain uses this step in conjunction with later injection).

Affected Motioneye Project Motioneye versions

Motioneye Project Motioneye= 0.42.1, 0.43.1

All known vulnerabilities by product

Motioneye

CVSS 7.2 for CVE-2025-60787

7.2

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:HIGH

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

CVE-2025-60787

Exploit Details

Modified:2026-09-02 22:50

Last Seen:2026-09-05 18:44

Reporter:KitPloit

Other exploits for CVE-2025-60787

CVE-2025-60787_PoC

2026-09-07 KitPloitKITPLOIT

CVE-2025-60787

2026-09-07 KitPloitKITPLOIT

CVE-2025-60787

2026-09-05 KitPloitKITPLOIT

CVE-2025-60787-MotionEye-RCE

2026-09-03 KitPloitKITPLOIT

CVE-2025-60787

2026-09-02 KitPloitKITPLOIT

CVE-2025-60787

2026-09-01 KitPloitKITPLOIT

CVE-2025-60787-Detection-motionEye-RCE-via-Config-Injection

2026-09-01 KitPloitKITPLOIT

Exploit for Improper Input Validation in Motioneye_Project Motioneye

2026-07-10 ozcanpngGITHUB

Exploit Code

MARKDOWN10 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-D3VN0MI-CVE-2025-60787-POC
# CVE-2025-60787 - motionEye प्रमाणित दूरस्थ कोड निष्पादन

**motionEye <= 0.43.1b4 में अप्रमाणित मोशन कॉन्फ़िग पैरामीटर के माध्यम से प्रमाणित दूरस्थ कोड निष्पादन**

लेखक: **d3vn0mi**

* * *

## भेद्यता अवलोकन

Exploit Code

Share

Share on social media: