CVE-2024-7339 PoC — TVT DVR TD-2104TS-CL queryDevInfo information disclosure

Source

https://github.com/RevoltSecurities/CVE-2024-7339

Associated Vulnerability

Title: TVT DVR TD-2104TS-CL queryDevInfo information disclosure (CVE-2024-7339)
Description:A vulnerability has been found in TVT DVR TD-2104TS-CL, DVR TD-2108TS-HP, Provision-ISR DVR SH-4050A5-5L(MM) and AVISION DVR AV108T and classified as problematic. This vulnerability affects unknown code of the file /queryDevInfo. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-273262 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Description

An Vulnerability detection and Exploitation tool for  CVE-2024-7339

Readme

# CVE-2024-7339: Information Leak Vulnerability in DVR devices.
Exploiter an Vulnerability detection and Exploitation tool for  CVE-2024-7339 Information leak vulnerability in DVR Vulnerability Over 400,000+ devices which leaks information like product model, kernel version and etc.

<h1 align="center">
  <img src="https://github.com/user-attachments/assets/26e09ddf-bc43-424c-b848-d3d79d356580" width="2000px">
  <br>
</h1>

### Installation

```bash
https://github.com/RevoltSecurities/CVE-2024-7339.git
cd CVE-2024-7339
pip install -r requirements.txt
python3 exploit.py --help
```

### Usage:

```yaml
python3 exploit.py -h                          

    ______     ____  __         _ ______
   / ____/  __/ __ \/ /  ____  (_)_  __/__  _____
  / __/ | |/_/ /_/ / /  / __ \/ / / / / _ \/ ___/
 / /____>  </ ____/ /__/ /_/ / / / / /  __/ /
/_____/_/|_/_/   /_____|____/_/ /_/  \___/_/

                    @RevoltSecurities

[Description]: Vulnerability Detection and Exploitation tool for CVE-2024-7339

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     [INF]: Specify a URL or domain for vulnerability detection
  -l LIST, --list LIST  [INF]: Specify a list of URLs for vulnerability detection
  -t THREADS, --threads THREADS
                        [INF]: Number of threads for list of URLs
  -proxy PROXY, --proxy PROXY
                        [INF]: Proxy URL to send request via your proxy
  -v, --verbose         [INF]: Increases verbosity of output in console
  -o OUTPUT, --output OUTPUT
                        [INF]: Filename to save output of vulnerable target]
```

### Disclaimer
The tool ⚒️ is only for education 📖 and ethical purpose only and Developers are not responsible for any illegal exploitations.

### About:

The Exploiter tool is for education purpose and devlopers are not responsible any illegal exploitation with this tool and the devloper is mentioned below
   - [Sanjaith3hacker @RevoltSecurities](https://www.linkedin.com/in/d-sanjai-kumar-109a7227b/)


if any update or help need in tool please contact the mentioned devloper in our team.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →