motioneye vulnerabilities (PyPI)
11 vulnerabilities.
-
motioneyePyPI motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal 10.0 Critical -
motioneyePyPI motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE) 9.8 Critical -
motioneyePyPI motionEye: Missing authentication on ActionHandler allows unauthenticated camera action execution 5.3 Medium -
motioneyePyPI motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read 7.7 High -
motioneyePyPI motionEye: Authentication possible via password hash 9.1 Critical -
motioneyePyPI motionEye: World-Readable Configuration File Exposes Admin Password Hash 5.5 Medium -
motioneyePyPI motionEye: Arbitrary File Read via Path Traversal in Picture/Movie Preview Endpoint 6.5 Medium -
motioneyePyPI Duplicate Advisory: motionEye vulnerable to RCE via unsanitized motion config parameter 7.2 High -
motioneyePyPI motionEye vulnerable to RCE in add_camera Function Due to unsafe command execution 8.9 High -
motioneyePyPI MotionEye allows attackers to access sensitive information 7.5 High -
motioneyePyPI Unrestricted Upload of File with Dangerous Type in motionEye 7.2 High