CVE-2021-36260

Summary

A command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

• hikvision_probeScanner

  Identify hikvision ip and probe for cve-s (CVE-2017-7921, CVE-2022-28171, CVE-2021-36260)

• CVE-2021-36260PoC

  command injection vulnerability in the web server of some Hikvision product. Due to the insufficient input validation, attacker can exploit the vulnerability to launch a command injection attack by sending some messages with malicious commands.

• CVE-2021-36260Exploit

  CVE-2021-36260

• CVE-2021-36260-hikvisionExploit

  Python exploit for CVE-2021-36260 command injection in Hikvision web servers. Supports safe/unsafe vulnerability verification, remote command execution, and SSH shell access on IoT devices.

• CVE-2021-36260-metasploitPoC

  the metasploit script(POC) about CVE-2021-36260

• hikvision-unauthenticated-rce-cve-2021-36260Exploit

  海康威视RCE漏洞 批量检测和利用工具

• HikvisionExploiter_fixedExploit

  HikvisionExploiter - это Python утилита созданная для автоматизации сканирования и проверки прямого доступа к сети камер Hikvision, нацеленная на поиск уязвимости Web interface версии 3.1.3.150324 + CVE-2021-36260

• CVE-2021-36260Exploit

  海康威视RCE漏洞 批量检测和利用工具

• HIK-CVE-2021-36260-ExploitExploit

  Go-based brute-force exploit tool targeting Hikvision cameras vulnerable to CVE-2021-36260, with multi-threaded scanning and configurable timeout/delay parameters.

• IngramScanner

  网络摄像头漏洞扫描工具 | Webcam vulnerability scanning tool

• PoCPoC

  Issues has been disabled for these PoC's, as they are simply PoC, Public Domain and unsupported.

• hikvision_bruteExploit

  Brute Hikvision CAMS with CVE-2021-36260 Exploit

• hikvision-exploiterExploit

  CVE-2017-7921, CVE-2021-36260 updated 21/01/2026

• HikvisionExploiterExploit

  HikvisionExploiter is a Python-based utility designed to automate exploitation and directory accessibility checks on Hikvision network cameras exploiting the Web interface Version 3.1.3.150324 + CVE-2021-36260 Detection

• CheckHKRCEExploit

  CVE-2021-36260

• APT-BackpackExploit

  cve-2019-11510, cve-2019-19781, cve-2020-5902,               cve-2021-1497, cve-2021-20090, cve-2021-22006, cve-2021-22205, cve-2021-26084, cve-2021-26855, cve-2021-26857, cve-2021–26857, cve-2021–26858, cve-2021–26865

• Hikvision Web Server Build 210702 - Command InjectionExploit

  bashis · hardware · Oct 25, 2021