Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-3721 PoC — TBK DVR-4104/DVR-4216 os command injection

Source
https://github.com/qalvynn/Mirai-Based-CVE-2024-3721-Selfrep
Associated Vulnerability
Title:TBK DVR-4104/DVR-4216 os command injection (CVE-2024-3721)
Description:A vulnerability was found in TBK DVR-4104 and DVR-4216 up to 20240412 and classified as critical. This issue affects some unknown processing of the file /device.rsp?opt=sys&cmd=___S_O_S_T_R_E_A_MAX___. The manipulation of the argument mdb/mdc leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-260573 was assigned to this vulnerability.
File Snapshot

 [4.0K]  /data/pocs/4f629de5ce4dd9a170da975a09258237dcafcef3
└── [8.1K]  tbk.c

1 directory, 1 file
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →