Code-Injection

CCTV management portal with an unauthenticated camera stream API. Lua script injection via camera name field executes OS commands as root.…