ZoneMinder
ZoneMinder instances have been discovered at the /zm/ endpoint at both web servers running on the port 80, 3305 and 8080.
/Practice/Pebbles/2-Enumeration/attachments/Pasted-image-20250311193828.png)
ZoneMinder is a free, open-source software application for monitoring via closed-circuit television - developed to run under Linux and FreeBSD and released under the terms of the GNU General Public License (GPL).
/Practice/Pebbles/2-Enumeration/attachments/{2AB51D0C-D26E-454E-BE4D-F88A8AB3787C}.png)
Both instances appear to be identical with its version set to 1.29.0
Vulnerabilities
/Practice/Pebbles/2-Enumeration/attachments/{F96C337C-A621-4BE7-8012-FB7BB3A06469}.png)
Searching the instance online for additional resource reveals several vulnerabilities, which includes a SQL injection vulnerability