HTB STARTING POINT · Tier 2

CCTV

CCTV management portal with an unauthenticated camera stream API. Lua script injection via camera name field executes OS commands as root.…

April 28, 2026 · 3 min · crAIzy
Lua InjectionWeb RCE