technique://Web RCE
- CCTVLinux Tier 2 Apr 28, 2026
CCTV management portal with an unauthenticated camera stream API. Lua script injection via camera name field executes OS commands as root.
also uses: Lua Injection
CCTV management portal with an unauthenticated camera stream API. Lua script injection via camera name field executes OS commands as root.