CVE-2013-4863

The exploit demonstrates multiple vulnerabilities in MiCasaVerde VeraLite, including path traversal, insufficient authorization checks, and CSRF. It provides proof-of-concept code for arbitrary file disclosure, privilege escalation via firmware updates, and remote code execution through Lua code injection.

This HTML-based exploit leverages CVE-2013-4863 and CVE-2016-6255 to achieve remote code execution on MiCasa VeraLite devices by exploiting a vulnerable libupnp server and executing a reverse shell via Lua code injection.

This repository contains a functional exploit PoC for CVE-2013-4863, leveraging a combination of UPnP vulnerabilities (CVE-2013-4863 and CVE-2016-6255) and WebRTC IP leakage to achieve remote code execution on VeraLite devices. The exploit involves creating a malicious file via UPnP, bypassing same-origin policy, and executing a reverse shell.